CVE-2026-98876
host1x: bus: Fix missing ops null check in error teardown
Description
In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL. Fix by adding the missing client->ops check in both the teardown and teardown_late labels.
INFO
Published Date :
Oct. 23, 2026, 12:18 p.m.
Last Modified :
Oct. 23, 2026, 12:18 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Add client->ops check in teardown labels.
- Add client->ops check in teardown_late labels.
- Update the Linux kernel to the patched version.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-98876.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-98876 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-98876
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-98876 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-98876 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Oct. 23, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL. Fix by adding the missing client->ops check in both the teardown and teardown_late labels. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/98xxx/CVE-2026-98876.json">CVE-2026-98876</a> Added Reference https://git.kernel.org/stable/c/29375e071ea201fe97bafe1d2ad9d9f30311abfb Added Reference https://git.kernel.org/stable/c/62851e7b0e55de6fe08da08bc41fd587fbcb0e9b Added Reference https://git.kernel.org/stable/c/71d25f668bc5c0f36ea843462e12307dea45aaa3 Added Reference https://git.kernel.org/stable/c/74bd1f05d9ba2d6672d30ccafe80a38104c1f73f Added Reference https://git.kernel.org/stable/c/d8d5b6e02fc281dea33d6b0b0fadaccea56f2067 Added Reference https://git.kernel.org/stable/c/f1fa6c936fa9de80ae446ba5e76e227e991b8e56