kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks
cve CVE-2026-98121 3 sources, 4 claims · Watch
- Severity they disagree
- unknown GitHub advisoriesmoderate Red Hat
- CVSS
- 5.5 Red Hat
- Vendor
- Linux NVD
- Product
- Linux NVD
- CWE
- CWE-476 Red Hat
How far exploitation has got
- No public code known
- Proof of concept
- Proof of concept, verified
- A Metasploit module
- Exploited in the wild
- Used in ransomware campaigns
Timeline
| 2026-09-25 | first spoke of it: In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL... | GitHub advisories |
| 2026-09-25 | first spoke of it: In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks msc313e_wdt_probe() doesn't set the driver data for the platform device. As a result, dev_get_drvdata() in msc313e_wdt_suspend() and msc313e_wdt_resume() will return NULL, leading to a NULL pointer dereference afterward. Set the platform device driver data in msc313e_wdt_probe(). | NVD |
| 2026-09-25 | first spoke of it: kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks | Red Hat |
What it is to other things
In words only, so not counted until a person confirms one:
| affects | linux/linuxNVD says “Linux · Linux” |
| made_by | linuxNVD says “Linux” |
Every value, with what each source said and its receipt
| Property | Source | Said | Means here | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CVSS cvss | Red Hat | 5.5receipt
What the source handed over{
"CVE": "CVE-2026-98121",
"CWE": "CWE-476",
"advisories": [],
"affected_packages": [],
"bugzilla": "2541334",
"bugzilla_description": "kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks",
"cvss3_score": "5.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-09-25T00:00:00Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-98121.json",
"severity": "moderate"
} | — | ||||||
| CVSS vector cvss_vector | Red Hat | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hreceipt
What the source handed over{
"CVE": "CVE-2026-98121",
"CWE": "CWE-476",
"advisories": [],
"affected_packages": [],
"bugzilla": "2541334",
"bugzilla_description": "kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks",
"cvss3_score": "5.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-09-25T00:00:00Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-98121.json",
"severity": "moderate"
} | — | ||||||
| CWE cwe | Red Hat | CWE-476receipt
What the source handed over{
"CVE": "CVE-2026-98121",
"CWE": "CWE-476",
"advisories": [],
"affected_packages": [],
"bugzilla": "2541334",
"bugzilla_description": "kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks",
"cvss3_score": "5.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-09-25T00:00:00Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-98121.json",
"severity": "moderate"
} | — | ||||||
| Product product | NVD | Linuxreceipt
What the source handed over{
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/watchdog/msc313e_wdt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "960251cc4a413d8f1eef2a2c6aca41073b57ce16",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "afc3ea51e479289a23c642cc8bade67b94225ed9",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "a135415be56839e555e0bcdd5ffb8d2f5f947bd7",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "b02f902fe4b59d65f74a25c4523a75453bd3f808",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "744b25040d8206f7925b8ba0be5edf93fa4bf81e",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "6495dc16e635356fd2b7535dcbf9b6779de4e753",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "e3eceb76515910746e6268c4e4ac1c07516ebd7b",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/watchdog/msc313e_wdt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.14"
},
{
"lessThan": "5.14",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.111",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.53",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.2.*",
"status": "unaffected",
"version": "7.2.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.3-rc3",
"versionType": "original_commit_for_fix"
}
]
}
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: msc313e: Fix NULL pointer dereference in PM callbacks\n\nmsc313e_wdt_probe() doesn't set the driver data for the platform device.\nAs a result, dev_get_drvdata() in msc313e_wdt_suspend() and\nmsc313e_wdt_resume() will return NULL, leading to a NULL pointer\ndereference afterward.\n\nSet the platform device driver data in msc313e_wdt_probe()."
}
],
"id": "CVE-2026-98121",
"lastModified": "2026-10-03T11:18:33.760",
"metrics": {},
"published": "2026-09-25T11:17:43.360",
"references": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/960251cc4a413d8f1eef2a2c6aca41073b57ce16"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/a135415be56839e555e0bcdd5ffb8d2f5f947bd7"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/afc3ea51e479289a23c642cc8bade67b94225ed9"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/e3eceb76515910746e6268c4e4ac1c07516ebd7b"
}
],
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"vulnStatus": "Undergoing Analysis"
}
} | — | ||||||
| Severity severity conflict | GitHub advisories | unknownreceipt
This source has not kept a receipt for this claim yet. The next update that reads it will. | — | ||||||
| Severity severity conflict | Red Hat | moderate A flaw that is harder to exploit, or whose impact is limited. receipt
What the source handed over{
"CVE": "CVE-2026-98121",
"CWE": "CWE-476",
"advisories": [],
"affected_packages": [],
"bugzilla": "2541334",
"bugzilla_description": "kernel: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks",
"cvss3_score": "5.5",
"cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"cvss_score": null,
"cvss_scoring_vector": null,
"package_state": null,
"public_date": "2026-09-25T00:00:00Z",
"resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-98121.json",
"severity": "moderate"
} | medium | ||||||
| Status status | NVD | Undergoing Analysisreceipt
What the source handed over{
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/watchdog/msc313e_wdt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "960251cc4a413d8f1eef2a2c6aca41073b57ce16",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "afc3ea51e479289a23c642cc8bade67b94225ed9",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "a135415be56839e555e0bcdd5ffb8d2f5f947bd7",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "b02f902fe4b59d65f74a25c4523a75453bd3f808",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "744b25040d8206f7925b8ba0be5edf93fa4bf81e",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "6495dc16e635356fd2b7535dcbf9b6779de4e753",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "e3eceb76515910746e6268c4e4ac1c07516ebd7b",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/watchdog/msc313e_wdt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.14"
},
{
"lessThan": "5.14",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.111",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.53",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.2.*",
"status": "unaffected",
"version": "7.2.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.3-rc3",
"versionType": "original_commit_for_fix"
}
]
}
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: msc313e: Fix NULL pointer dereference in PM callbacks\n\nmsc313e_wdt_probe() doesn't set the driver data for the platform device.\nAs a result, dev_get_drvdata() in msc313e_wdt_suspend() and\nmsc313e_wdt_resume() will return NULL, leading to a NULL pointer\ndereference afterward.\n\nSet the platform device driver data in msc313e_wdt_probe()."
}
],
"id": "CVE-2026-98121",
"lastModified": "2026-10-03T11:18:33.760",
"metrics": {},
"published": "2026-09-25T11:17:43.360",
"references": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/960251cc4a413d8f1eef2a2c6aca41073b57ce16"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/a135415be56839e555e0bcdd5ffb8d2f5f947bd7"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/afc3ea51e479289a23c642cc8bade67b94225ed9"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/e3eceb76515910746e6268c4e4ac1c07516ebd7b"
}
],
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"vulnStatus": "Undergoing Analysis"
}
} | — | ||||||
| Vendor vendor | NVD | Linuxreceipt
What the source handed over{
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/watchdog/msc313e_wdt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "960251cc4a413d8f1eef2a2c6aca41073b57ce16",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "afc3ea51e479289a23c642cc8bade67b94225ed9",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "a135415be56839e555e0bcdd5ffb8d2f5f947bd7",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "b02f902fe4b59d65f74a25c4523a75453bd3f808",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "744b25040d8206f7925b8ba0be5edf93fa4bf81e",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "6495dc16e635356fd2b7535dcbf9b6779de4e753",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
},
{
"lessThan": "e3eceb76515910746e6268c4e4ac1c07516ebd7b",
"status": "affected",
"version": "e9800b7994642a794afd4894f072541c14277ce8",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/watchdog/msc313e_wdt.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.14"
},
{
"lessThan": "5.14",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.111",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.53",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.2.*",
"status": "unaffected",
"version": "7.2.7",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.3-rc3",
"versionType": "original_commit_for_fix"
}
]
}
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: msc313e: Fix NULL pointer dereference in PM callbacks\n\nmsc313e_wdt_probe() doesn't set the driver data for the platform device.\nAs a result, dev_get_drvdata() in msc313e_wdt_suspend() and\nmsc313e_wdt_resume() will return NULL, leading to a NULL pointer\ndereference afterward.\n\nSet the platform device driver data in msc313e_wdt_probe()."
}
],
"id": "CVE-2026-98121",
"lastModified": "2026-10-03T11:18:33.760",
"metrics": {},
"published": "2026-09-25T11:17:43.360",
"references": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/960251cc4a413d8f1eef2a2c6aca41073b57ce16"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/a135415be56839e555e0bcdd5ffb8d2f5f947bd7"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/afc3ea51e479289a23c642cc8bade67b94225ed9"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808"
},
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"url": "https://git.kernel.org/stable/c/e3eceb76515910746e6268c4e4ac1c07516ebd7b"
}
],
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"vulnStatus": "Undergoing Analysis"
}
} | — |