CVE-2026-98411: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
In the Linux kernel, the following vulnerability has been resolved:
power: sequencing: fix NULL-pointer dereference in pwrseqdeviceregister()
If devsetname() fails in pwrseqdeviceregister(), we jump to the errputpwrseq label before initializing pwrseq->targets. pwrseqrelease() will try to iterate over targets unconditionally and subsequently dereference an invalid pointer. Move the call to devsetname() after the list head is initialized.
Affected Software
Event History
Frequently Asked Questions
Under what condition can this NULL-pointer dereference occur?
It can occur when dev_set_name() fails during pwrseq_device_register(). The failure path releases the power-sequencing object before its targets list head has been initialized.
Is normal successful device registration affected?
The described dereference is limited to the error path triggered by a dev_set_name() failure. The data does not indicate that successful registrations reach the vulnerable release path.
What change resolves the issue?
The fix initializes the targets list head before calling dev_set_name(). This ensures pwrseq_release() can safely iterate the list if naming fails.