{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98121", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.318Z", "datePublished": "2026-09-25T10:36:04.765Z", "dateUpdated": "2026-10-03T11:02:32.422Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-03T11:02:32.422Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: msc313e: Fix NULL pointer dereference in PM callbacks\n\nmsc313e_wdt_probe() doesn't set the driver data for the platform device.\nAs a result, dev_get_drvdata() in msc313e_wdt_suspend() and\nmsc313e_wdt_resume() will return NULL, leading to a NULL pointer\ndereference afterward.\n\nSet the platform device driver data in msc313e_wdt_probe()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/watchdog/msc313e_wdt.c"], "versions": [{"version": "e9800b7994642a794afd4894f072541c14277ce8", "lessThan": "960251cc4a413d8f1eef2a2c6aca41073b57ce16", "status": "affected", "versionType": "git"}, {"version": "e9800b7994642a794afd4894f072541c14277ce8", "lessThan": "afc3ea51e479289a23c642cc8bade67b94225ed9", "status": "affected", "versionType": "git"}, {"version": "e9800b7994642a794afd4894f072541c14277ce8", "lessThan": "a135415be56839e555e0bcdd5ffb8d2f5f947bd7", "status": "affected", "versionType": "git"}, {"version": "e9800b7994642a794afd4894f072541c14277ce8", "lessThan": "b02f902fe4b59d65f74a25c4523a75453bd3f808", "status": "affected", "versionType": "git"}, {"version": "e9800b7994642a794afd4894f072541c14277ce8", "lessThan": "744b25040d8206f7925b8ba0be5edf93fa4bf81e", "status": "affected", "versionType": "git"}, {"version": "e9800b7994642a794afd4894f072541c14277ce8", "lessThan": "6495dc16e635356fd2b7535dcbf9b6779de4e753", "status": "affected", "versionType": "git"}, {"version": "e9800b7994642a794afd4894f072541c14277ce8", "lessThan": "e3eceb76515910746e6268c4e4ac1c07516ebd7b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/watchdog/msc313e_wdt.c"], "versions": [{"version": "5.14", "status": "affected"}, {"version": "0", "lessThan": "5.14", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.7", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "7.2.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "7.3-rc3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/960251cc4a413d8f1eef2a2c6aca41073b57ce16"}, {"url": "https://git.kernel.org/stable/c/afc3ea51e479289a23c642cc8bade67b94225ed9"}, {"url": "https://git.kernel.org/stable/c/a135415be56839e555e0bcdd5ffb8d2f5f947bd7"}, {"url": "https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808"}, {"url": "https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e"}, {"url": "https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753"}, {"url": "https://git.kernel.org/stable/c/e3eceb76515910746e6268c4e4ac1c07516ebd7b"}], "title": "watchdog: msc313e: Fix NULL pointer dereference in PM callbacks", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/watchdog/msc313e_wdt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "960251cc4a413d8f1eef2a2c6aca41073b57ce16", "status": "affected", "version": "e9800b7994642a794afd4894f072541c14277ce8", "versionType": "git"}, {"lessThan": "afc3ea51e479289a23c642cc8bade67b94225ed9", "status": "affected", "version": "e9800b7994642a794afd4894f072541c14277ce8", "versionType": "git"}, {"lessThan": "a135415be56839e555e0bcdd5ffb8d2f5f947bd7", "status": "affected", "version": "e9800b7994642a794afd4894f072541c14277ce8", "versionType": "git"}, {"lessThan": "b02f902fe4b59d65f74a25c4523a75453bd3f808", "status": "affected", "version": "e9800b7994642a794afd4894f072541c14277ce8", "versionType": "git"}, {"lessThan": "744b25040d8206f7925b8ba0be5edf93fa4bf81e", "status": "affected", "version": "e9800b7994642a794afd4894f072541c14277ce8", "versionType": "git"}, {"lessThan": "6495dc16e635356fd2b7535dcbf9b6779de4e753", "status": "affected", "version": "e9800b7994642a794afd4894f072541c14277ce8", "versionType": "git"}, {"lessThan": "e3eceb76515910746e6268c4e4ac1c07516ebd7b", "status": "affected", "version": "e9800b7994642a794afd4894f072541c14277ce8", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/watchdog/msc313e_wdt.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.14"}, {"lessThan": "5.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: msc313e: Fix NULL pointer dereference in PM callbacks\n\nmsc313e_wdt_probe() doesn't set the driver data for the platform device.\nAs a result, dev_get_drvdata() in msc313e_wdt_suspend() and\nmsc313e_wdt_resume() will return NULL, leading to a NULL pointer\ndereference afterward.\n\nSet the platform device driver data in msc313e_wdt_probe()."}], "id": "CVE-2026-98121", "lastModified": "2026-10-03T11:18:33.760", "metrics": {}, "published": "2026-09-25T11:17:43.360", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/960251cc4a413d8f1eef2a2c6aca41073b57ce16"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a135415be56839e555e0bcdd5ffb8d2f5f947bd7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/afc3ea51e479289a23c642cc8bade67b94225ed9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e3eceb76515910746e6268c4e4ac1c07516ebd7b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Undergoing Analysis"}

{"bugzilla": {"description": "kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks", "id": "2541334", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541334"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nwatchdog: msc313e: Fix NULL pointer dereference in PM callbacks\nmsc313e_wdt_probe() doesn't set the driver data for the platform device.\nAs a result, dev_get_drvdata() in msc313e_wdt_suspend() and\nmsc313e_wdt_resume() will return NULL, leading to a NULL pointer\ndereference afterward.\nSet the platform device driver data in msc313e_wdt_probe().", "A flaw was found in the Linux kernel's Mstar MSC313e watchdog driver. The driver fails to properly set platform device data during device initialization. Consequently, when system power management routines attempt to access this data during suspend or resume operations, a NULL pointer dereference occurs, resulting in a kernel crash and Denial of Service (DoS)."], "name": "CVE-2026-98121", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98121\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98121\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98121.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e9800b7994642a794afd4894f072541c14277ce8,b02f902fe4b59d65f74a25c4523a75453bd3f808)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e9800b7994642a794afd4894f072541c14277ce8,744b25040d8206f7925b8ba0be5edf93fa4bf81e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e9800b7994642a794afd4894f072541c14277ce8,6495dc16e635356fd2b7535dcbf9b6779de4e753)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e9800b7994642a794afd4894f072541c14277ce8,e3eceb76515910746e6268c4e4ac1c07516ebd7b)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.14"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.14)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-25T12:30:08.113050+00:00", "updated": "2026-09-30T06:00:12.724032+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}