CVE-2026-98504 Linux CVE debrief

Who should care

Linux kernel maintainers, users, and administrators should assess exposure and verify patches to address the potential vulnerability. Linux kernel maintainers and users must assess exposure to CVE-2026-98504. The vulnerability could lead to a NULL pointer dereference and early boot hang in certain configurations. Verification of affected systems and updating to fixed kernel versions is necessary to prevent potential issues.

Why it matters

CVE-2026-98504 is a Linux kernel vulnerability that requires verification of affected systems and updating to fixed kernel versions to prevent potential issues.

• Verification of affected systems and updating to fixed kernel versions is necessary to prevent potential issues.
• Linux kernel maintainers and users must assess exposure to CVE-2026-98504.
• The vulnerability could lead to a NULL pointer dereference and early boot hang in certain configurations.

Technical summary

The dynamic OF helpers of_pci_prop_bus_range() and of_pci_prop_intr_map() dereference pdev->subordinate without checking it, potentially causing a NULL pointer dereference and early boot hang when CONFIG_PCI_DYNAMIC_OF_NODES is enabled. The issue was latent since 407d1a51921e and became reachable with 1f340724419e, appearing in v6.15. This problem arises from the dynamic OF helpers of_pci_prop_bus_range() and of_pci_prop_intr_map() dereferencing pdev->subordinate without checking it. A bridge (a device with a Type 1 header) may not have a secondary bus allocated (pdev->subordinate), e.g., if there are no available bus numbers or the bridge secondary/subordinate bus numbers are not writable.

Defensive priority

Linux kernel maintainers and users should assess exposure and verify patches, prioritizing validation of affected systems and updating to fixed kernel versions.

Recommended defensive actions

• Review Linux kernel versions and assess exposure to CVE-2026-98504
• Verify patches and update to fixed kernel versions as needed
• Validate affected systems and monitor for potential issues
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, while source references offer technical insights into the issue and its resolution. The dynamic OF helpers of_pci_prop_bus_range() and of_pci_prop_intr_map() dereference pdev->subordinate without checking it, potentially causing a NULL pointer dereference and early boot hang when CONFIG_PCI_DYNAMIC_OF_NODES is enabled. This problem was latent since 407d1a51921e and became reachable with 1f340724419e, appearing in v6.15. The issue arises from the dynamic OF helpers of_p

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.