Riskcovery

CVE-2026-53042

fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal

State
Published
Severity
Not scored
Published
Jun 24, 2026
Updated
Jun 24, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal

CXL is linked before fwctl in drivers/Makefile. Both use `module_init, so `cxl_pci_driver_init()` runs first. When `cxl_pci_probe()` calls `fwctl_register()` and then `device_add()`, fwctl_class is not yet registered because fwctl_init() hasn't run, causing `class_to_subsys()` to return NULL and skip knode_class initialization.

On device removal, `class_to_subsys()` returns non-NULL, and `device_del()` calls `klist_del()` on the uninitialized knode, triggering a NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 858ce2f56b5253063f61f6b1c58a6dbf5d71da0b to before a28f56988c8e5bb9375806a5cfb0bf54d662ae3fAffected
  • 858ce2f56b5253063f61f6b1c58a6dbf5d71da0b to before 1075f2f590fdac147f8b8010c35b606564b5c7d7Affected
  • 858ce2f56b5253063f61f6b1c58a6dbf5d71da0b to before a55f80233f384dc89ef3425b2e1dd0e6d44bcf29Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.