Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-98913

Fixed in a distro release EPSS <1%

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() cavium_ptp_get() acquires a reference to the PTP PCI device through pci_get_device(). If any initialization step fails after cavium_ptp_get(), the PTP PCI device reference is leaked. Add a common error path to release the PTP reference before returning from probe failures.

Published 2026-10-23 · CVE record · OSV

Products: Linux

Distro releases

ReleasePackageFixed in
Debian 12linux6.1.190-1
Debian 13linux6.12.111-1
Debian 14linux7.2.6-1