CVE-2026-98913
Fixed in a distro release EPSS <1%
In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() cavium_ptp_get() acquires a reference to the PTP PCI device through pci_get_device(). If any initialization step fails after cavium_ptp_get(), the PTP PCI device reference is leaked. Add a common error path to release the PTP reference before returning from probe failures.
Products: Linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 6.1.190-1 |
| Debian 13 | linux | 6.12.111-1 |
| Debian 14 | linux | 7.2.6-1 |