CVE-2026-98121

medium

Description

In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks msc313e_wdt_probe() doesn't set the driver data for the platform device. As a result, dev_get_drvdata() in msc313e_wdt_suspend() and msc313e_wdt_resume() will return NULL, leading to a NULL pointer dereference afterward. Set the platform device driver data in msc313e_wdt_probe().

References

https://git.kernel.org/stable/c/e3eceb76515910746e6268c4e4ac1c07516ebd7b

https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808

https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e

https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753

Details

Source: Mitre, NVD

Published: 2026-09-25

Updated: 2026-09-25

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00168