Skip to main content
← All vulnerabilities
CVE-2026-98121

watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, and 1 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks msc313e_wdt_probe() doesn't set the driver data for the platform device. As a result, dev_get_drvdata() in msc313e_wdt_suspend() and msc313e_wdt_resume() will return NULL, leading to a NULL pointer dereference afterward. Set the platform device driver data in msc313e_wdt_probe().

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From e9800b7994642a794afd4894f072541c14277ce8 · fixed in 960251cc4a413d8f1eef2a2c6aca41073b57ce16; From e9800b7994642a794afd4894f072541c14277ce8 · fixed in afc3ea51e479289a23c642cc8bade67b94225ed9; From e9800b7994642a794afd4894f072541c14277ce8 · fixed in a135415be56839e555e0bcdd5ffb8d2f5f947bd7; From e9800b7994642a794afd4894f072541c14277ce8 · fixed in b02f902fe4b59d65f74a25c4523a75453bd3f808; From e9800b7994642a794afd4894f072541c14277ce8 · fixed in 744b25040d8206f7925b8ba0be5edf93fa4bf81e; From e9800b7994642a794afd4894f072541c14277ce8 · fixed in 6495dc16e635356fd2b7535dcbf9b6779de4e753; From e9800b7994642a794afd4894f072541c14277ce8 · fixed in e3eceb76515910746e6268c4e4ac1c07516ebd7b

  • Linux Linux

    5.14

  • KernelLinux

    From 5.14.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7

References 7

git.kernel.org