Strix
73.3K

CVE-2026-98620

Unknown

Last modified

CVE-2026-98620 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure If register_netdev() fails for one of the MTK_MAX_DEVS devices in mtk_probe(), the error path jumps to err_deinit_ppe, skipping mtk_unreg_dev(). The previously registered net_devices are then freed by mtk_free_dev() while still in NETREG_REGISTERED state, hitting the BUG_ON(dev->reg_state != NETREG_UNREGISTERED). Route the register_netdev() failure to err_unreg_netdev so the net_devices registered so far are properly unregistered before being freed..

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure If register_netdev() fails for one of the MTK_MAX_DEVS devices in mtk_probe(), the error path jumps to err_deinit_ppe, skipping mtk_unreg_dev(). The previously registered net_devices are then freed by mtk_free_dev() while still in NETREG_REGISTERED state, hitting the BUG_ON(dev->reg_state != NETREG_UNREGISTERED). Route the register_netdev() failure to err_unreg_netdev so the net_devices registered so far are properly unregistered before being freed.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 8a8a9e89f801ce5d3d1d57ac48db678caf072147, < 245bea0c7ab278150c70366bdeb69b901327133c; >= 8a8a9e89f801ce5d3d1d57ac48db678caf072147, < ab3bde3b3e56331b4f53a1f6cf4e5e9d1c14c1a0; >= 8a8a9e89f801ce5d3d1d57ac48db678caf072147, < 7254b702e556158e34b4d7c168b5d8e7da5978af; >= 8a8a9e89f801ce5d3d1d57ac48db678caf072147, < 0fdb944d4df02223c67d5e65c4c134ecb57a5668; >= 8a8a9e89f801ce5d3d1d57ac48db678caf072147, < 310d1ac61a4d5a2ca8356a3a48d263acf54503ce
LinuxLinux4.9

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98620?
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure If register_netdev() fails for one of the MTK_MAX_DEVS devices in mtk_probe(), the error path jumps to err_deinit_ppe, skipping mtk_unreg_dev(). The previously registered net_devices are then freed by mtk_free_dev() while still in NETREG_REGISTERED state, hitting the BUG_ON(dev->reg_state != NETREG_UNREGISTERED). Route the register_netdev() failure to err_unreg_netdev so the net_devices registered so far are properly unregistered before being freed.
How severe is CVE-2026-98620?
Severity scoring for CVE-2026-98620 is pending analysis.
How do I fix CVE-2026-98620?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98620?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST