CVE-2026-98913

net: thunderx: fix PTP device ref leak in nicvf_probe()

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 26, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: thunderx: fix PTP device ref leak in nicvf_probe()

cavium_ptp_get() acquires a reference to the PTP PCI device through pci_get_device(). If any initialization step fails after cavium_ptp_get(), the PTP PCI device reference is leaked. Add a common error path to release the PTP reference before returning from probe failures.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4a8755096466d1002236ac7293eae821b6de87ba to before 3a2eedb172e777f2c8608395eec42250fb355daeAffected 4a8755096466d1002236ac7293eae821b6de87ba to before c8bc44a1d86d5b432ec7f5a6f30b4e719a047374Affected 4a8755096466d1002236ac7293eae821b6de87ba to before df3d586ecc580623edadec71a6ffdf4c79e2a8e8Affected 4a8755096466d1002236ac7293eae821b6de87ba to before 916d74343cd60ef7c3d433bd417d26ba31642c09Affected 4a8755096466d1002236ac7293eae821b6de87ba to before 2bcf59eefb9f00a2b1d426b639ee49c305a80695Affected
LinuxLinux	4.16Affected before 4.16Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

4a8755096466d1002236ac7293eae821b6de87ba to before 3a2eedb172e777f2c8608395eec42250fb355daeAffected
4a8755096466d1002236ac7293eae821b6de87ba to before c8bc44a1d86d5b432ec7f5a6f30b4e719a047374Affected
4a8755096466d1002236ac7293eae821b6de87ba to before df3d586ecc580623edadec71a6ffdf4c79e2a8e8Affected
4a8755096466d1002236ac7293eae821b6de87ba to before 916d74343cd60ef7c3d433bd417d26ba31642c09Affected
4a8755096466d1002236ac7293eae821b6de87ba to before 2bcf59eefb9f00a2b1d426b639ee49c305a80695Affected

LinuxLinux

4.16Affected
before 4.16Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.