CVE-2026-98008

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the macb network driver when the device tree describes a fixed-link without an "mdio" child node. In this scenario, the macb mii init() function returns early without allocating the MDIO bus, leaving the bp->mii bus variable as NULL. This leads to a system crash (oops) in two cleanup paths: during driver unbind, where macb remove() calls mdiobus unregister() with the NULL bus, and during the probe error path in macb probe(), where the err out unregister mdio label triggers the same unconditional cleanup. The issue exists because mdiobus unregister() and mdiobus free() do not verify if the bus is NULL before processing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.