CVE-2026-98876

host1x: bus: Fix missing ops null check in error teardown

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 26, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

host1x: bus: Fix missing ops null check in error teardown

In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL.

Fix by adding the missing client->ops check in both the teardown and teardown_late labels.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before d8d5b6e02fc281dea33d6b0b0fadaccea56f2067Affected 8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before f1fa6c936fa9de80ae446ba5e76e227e991b8e56Affected 8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 74bd1f05d9ba2d6672d30ccafe80a38104c1f73fAffected 8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 62851e7b0e55de6fe08da08bc41fd587fbcb0e9bAffected 8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 29375e071ea201fe97bafe1d2ad9d9f30311abfbAffected 8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 71d25f668bc5c0f36ea843462e12307dea45aaa3Affected
LinuxLinux	4.16Affected before 4.16Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before d8d5b6e02fc281dea33d6b0b0fadaccea56f2067Affected
8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before f1fa6c936fa9de80ae446ba5e76e227e991b8e56Affected
8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 74bd1f05d9ba2d6672d30ccafe80a38104c1f73fAffected
8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 62851e7b0e55de6fe08da08bc41fd587fbcb0e9bAffected
8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 29375e071ea201fe97bafe1d2ad9d9f30311abfbAffected
8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 71d25f668bc5c0f36ea843462e12307dea45aaa3Affected

LinuxLinux

4.16Affected
before 4.16Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.