VulnerabilityPublished 25 Sep 2026Updated 19 Oct 2026

CVE-2026-98121: Linux kernel · watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in e3eceb76515910746e6268c4e4ac1c07516ebd7b : update Linux kernel when convenient.

Data as of 26 Oct 2026, 12:55 UTC

Severity

Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in e3eceb76515910746e6268c4e4ac1c07516ebd7b, b02f902fe4b59d65f74a25c4523a75453bd3f808, afc3ea51e479289a23c642cc8bade67b94225ed9 +4

Exploitation evidence

Disclosed: evidence found.
CVE published 25 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ e9800b7994642a794afd4894f072541c14277ce8, < e3eceb76515910746e6268c4e4ac1c07516ebd7b	Fixed in e3eceb76515910746e6268c4e4ac1c07516ebd7b
LinuxLinux	Affected ≥ e9800b7994642a794afd4894f072541c14277ce8, < b02f902fe4b59d65f74a25c4523a75453bd3f808	Fixed in b02f902fe4b59d65f74a25c4523a75453bd3f808
LinuxLinux	Affected ≥ e9800b7994642a794afd4894f072541c14277ce8, < afc3ea51e479289a23c642cc8bade67b94225ed9	Fixed in afc3ea51e479289a23c642cc8bade67b94225ed9
LinuxLinux	Affected ≥ e9800b7994642a794afd4894f072541c14277ce8, < a135415be56839e555e0bcdd5ffb8d2f5f947bd7	Fixed in a135415be56839e555e0bcdd5ffb8d2f5f947bd7
LinuxLinux	Affected ≥ e9800b7994642a794afd4894f072541c14277ce8, < 960251cc4a413d8f1eef2a2c6aca41073b57ce16	Fixed in 960251cc4a413d8f1eef2a2c6aca41073b57ce16
LinuxLinux	Affected ≥ e9800b7994642a794afd4894f072541c14277ce8, < 6495dc16e635356fd2b7535dcbf9b6779de4e753	Fixed in 6495dc16e635356fd2b7535dcbf9b6779de4e753

AI-suggested

A fix is available and has been applied in the Linux kernel source code as indicated by the listed fixed commit versions. Users and administrators should update to a kernel version that includes these fixes to remediate the vulnerability.

Description

A NULL pointer dereference vulnerability was identified and fixed in the Linux kernel watchdog driver for the msc313e platform. The issue occurs because the driver data for the platform device was not set during probe, causing subsequent power management callbacks to dereference a NULL pointer. This flaw was addressed by properly setting the platform device driver data in the probe function.

Impact

This vulnerability can cause a NULL pointer dereference in power management callbacks, which may lead to kernel crashes or system instability when suspend or resume operations are performed on affected devices. There is no indication of code execution or privilege escalation from the provided data.

Summary

The Linux kernel watchdog driver for the msc313e platform had a vulnerability where msc313e_wdt_probe() failed to set the driver data for the platform device. Consequently, calls to dev_get_drvdata() in the suspend and resume callbacks returned NULL, leading to a NULL pointer dereference. The fix involved setting the platform device driver data correctly in the probe function to prevent this dereference.

References

Community reviews

Loading reviews…

Exploitation evidence

What to do

Affected software

Description

AI analysisMachine-generated, updated 26 Oct 2026, 12:41 UTC

Technical details

References

Community reviews

Related threats