CVE-2026-98876

In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL.

Fix by adding the missing client->ops check in both the teardown and teardown_late labels.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98876.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

8f7da1578e90bf1af30269dc6dd8806c96e9c683

Fixed

d8d5b6e02fc281dea33d6b0b0fadaccea56f2067

Fixed

f1fa6c936fa9de80ae446ba5e76e227e991b8e56

Fixed

74bd1f05d9ba2d6672d30ccafe80a38104c1f73f

Fixed

62851e7b0e55de6fe08da08bc41fd587fbcb0e9b

Fixed

29375e071ea201fe97bafe1d2ad9d9f30311abfb

Fixed

71d25f668bc5c0f36ea843462e12307dea45aaa3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98876.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.16.0

Fixed

5.15.222

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.1.189

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.158

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.111

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.53

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98876.json"