CVE-2026-98000

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the pec store() function. The problem occurs when a guard(mutex)(&hwdev->lock) is acquired and a chip write operation returns an error other than -EOPNOTSUPP. In this scenario, the code executes a jump to a label that calls put device(hdev), which may free the device if the final reference is dropped. Subsequently, the guard cleanup function attempts to unlock the mutex of the already freed device.

Recommendations Replace the use of guard() with scoped guard() within the pec store() function to prevent the Use-After-Free condition.