Answer in brief
CVE-2026-98876 records a Unknown severity vulnerability in host1x: bus: Fix missing ops null check in error teardown. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <d8d5b6e02fc281dea33d6b0b0fadaccea56f2067 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <f1fa6c936fa9de80ae446ba5e76e227e991b8e56 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <74bd1f05d9ba2d6672d30ccafe80a38104c1f73f || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <62851e7b0e55de6fe08da08bc41fd587fbcb0e9b || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <29375e071ea201fe97bafe1d2ad9d9f30311abfb || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <71d25f668bc5c0f36ea843462e12307dea45aaa3 || >=0 <5.15.222 || >=0 <6.1.189 || >=0 <6.6.158 || >=0 <6.12.111 || >=0 <6.18.53 | d8d5b6e02fc281dea33d6b0b0fadaccea56f2067, f1fa6c936fa9de80ae446ba5e76e227e991b8e56, 74bd1f05d9ba2d6672d30ccafe80a38104c1f73f, 62851e7b0e55de6fe08da08bc41fd587fbcb0e9b, 29375e071ea201fe97bafe1d2ad9d9f30311abfb, 71d25f668bc5c0f36ea843462e12307dea45aaa3, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53 |
Published upstream
Oct 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 23, 2026
In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL. Fix by adding the missing client->ops check in both the teardown and teardown_late labels.
Quoted source text, attributed separately from HOL analysis.