CVE-2026-98121 PUBLISHED

watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

msc313e_wdt_probe() doesn't set the driver data for the platform device. As a result, dev_get_drvdata() in msc313e_wdt_suspend() and msc313e_wdt_resume() will return NULL, leading to a NULL pointer dereference afterward.

Set the platform device driver data in msc313e_wdt_probe().

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from e9800b7994642a794afd4894f072541c14277ce8 to b02f902fe4b59d65f74a25c4523a75453bd3f808 (excl.)
  • affected from e9800b7994642a794afd4894f072541c14277ce8 to 744b25040d8206f7925b8ba0be5edf93fa4bf81e (excl.)
  • affected from e9800b7994642a794afd4894f072541c14277ce8 to 6495dc16e635356fd2b7535dcbf9b6779de4e753 (excl.)
  • affected from e9800b7994642a794afd4894f072541c14277ce8 to e3eceb76515910746e6268c4e4ac1c07516ebd7b (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.14 is affected
  • unaffected from 0 to 5.14 (excl.)
  • unaffected from 6.12.111 to 6.12.* (incl.)
  • unaffected from 6.18.53 to 6.18.* (incl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc3 to * (incl.)

References