CVE-2026-98412EPSS p10.4%
CVE-2026-98412CVE-2026-98412
Description
In the Linux kernel, the following vulnerability has been resolved:
power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
If memory allocation fails in pwrseq_unit_setup_deps(), pwrseq_unit_put()
is called to release the partially initialized unit. However, we've
never initialized unit->list and pwrseq_unit_release() will
unconditionally call list_del() on it. Initialize unit->list right after
allocating the unit struct.
Scoring
| EPSS | 0.21% probability of exploitation · percentile 10.4% · 2026-10-17T12:00:28Z |
| Last modified | 2026-10-14 |