Null Pointer Dereference Vulnerability in Linux Kernel Affects Virtual Machine Notification Handlers

CVE-2026-98841

What is CVE-2026-98841?

A vulnerability exists in the Linux kernel that can result in a NULL pointer dereference when notification handlers for virtual machines are registered improperly. This occurs when driver data is accessed before it's been initialized, which can lead to system crashes upon receiving asynchronous notifications. Specific scenarios include when a snapshot of a virtual machine is restored, potentially triggering notifications before the driver has completed its setup. The vulnerability affects both devicetree and ACPI paths, as it allows interrupt requests to invoke handlers that lack proper data, ultimately causing kernel panics. Proper assignment of driver data prior to handler registration is crucial to mitigate this issue, ensuring that the state is fully initialized and that handlers operate safely.

References