PT-2026-117014 · Linux · Linux

CVE-2026-98795

·

Published

2026-10-18

·

Updated

2026-10-18

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
net: sparx5: skip ptp deinit if init was skipped
sparx5 ptp init() returns early on the base lan969x variants because they do not have the SPX5 FEATURE PTP flag. It also returns early when no "ptp" interrupt is described. Unbinding the driver then causes a NULL pointer dereference when cleaning up uninitialized tx skbs queues:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Call trace: skb queue purge reason+0x68/0x120 (P) sparx5 ptp deinit+0x64/0xc0 mchp sparx5 remove+0x38/0x70 platform remove+0x20/0x30 device remove+0x4c/0x80
Before per-port tx skbs were added, a NULL dereference would have happened when calling ptp clock unregister() on the never-registered PTP clocks.
Fix by returning early in sparx5 ptp deinit() if PTP is not used.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-98795

Affected Products

Linux