Unchecked Return Value in Linux kernel - CVE-2026-98825
Published: October 22, 2026
Vulnerability details
The vulnerability allows a local privileged user to potentially cause a denial of service by triggering a kernel crash.
The vulnerability exists due to an unchecked error return in the Linux kernel's mpfs_rtc_probe() function when acquiring the RTC reference clock. A local privileged user can potentially trigger driver probing under conditions where devm_clk_get() returns an error pointer, causing clk_get_rate() to dereference that pointer and crash the kernel.
Affected software
SUSE Linux Micro
SUSE Linux Micro Extras
kernel-default
kernel-64kb
kernel-64kb-debugsource
kernel-64kb-devel
kernel-default-devel
kernel-syms
kernel-obs-build
kernel-obs-build-debugsource
kernel-default-debugsource
kernel-default-devel-debuginfo
How to mitigate CVE-2026-98825
kernel-default - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
External References
- https://git.kernel.org/stable/c/74dc7c52946e3d47c40edd0875adb7cc15937066
- https://git.kernel.org/stable/c/8a03f8422fa08eed335c51bccb612a3d81739ff2
- https://git.kernel.org/stable/c/ab741d1b714b4acc605f3d14cdc4120f87341ed1
- https://git.kernel.org/stable/c/ac41b05d15db3134e839148290d67415ee0bdb58
- https://git.kernel.org/stable/c/cfd70c9b19846c524f2b6195a7484bdf22071ccf