Back to CVE records
Not yet scoredPublished Oct 23, 2026

CVE-2026-98876host1x: bus: Fix missing ops null check in error teardown

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL. Fix by adding the missing client->ops check in both the teardown and teardown_late labels.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Oct 26, 2026
First seen by InfoSec Signals
Oct 23, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 8f7da1578e90bf1af30269dc6dd8806c96e9c683 before d8d5b6e02fc281dea33d6b0b0fadaccea56f2067; from 8f7da1578e90bf1af30269dc6dd8806c96e9c683 before f1fa6c936fa9de80ae446ba5e76e227e991b8e56; from 8f7da1578e90bf1af30269dc6dd8806c96e9c683 before 74bd1f05d9ba2d6672d30ccafe80a38104c1f73f; from 8f7da1578e90bf1af30269dc6dd8806c96e9c683 before 62851e7b0e55de6fe08da08bc41fd587fbcb0e9b; from 8f7da1578e90bf1af30269dc6dd8806c96e9c683 before 29375e071ea201fe97bafe1d2ad9d9f30311abfb; from 8f7da1578e90bf1af30269dc6dd8806c96e9c683 before 71d25f668bc5c0f36ea843462e12307dea45aaa3
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.