cyfenced.com →

[ CVE-2026-98129 · Published 25 Sep 2026 ]

Vulnerability in Linux

CVSS 5.5 EPSS <1%3 agency advisoriesFix available

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() sas_port_alloc_num() can return NULL on memory allocation failure. The return value is passed directly to sas_port_add() without a NULL check, which causes a NULL pointer dereference. Additionally, if sas_port_add() fails, the allocated port is not freed before jumping to out_fail, leaking the sas_port structure. Call sas_port_free() to properly release it.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1289

    Multiple vulnerabilities in the Debian LTS Linux kernel Translated from French

    Multiple vulnerabilities have been discovered in the Debian LTS Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.

    CVE-2025-38237CVE-2025-39833CVE-2025-39925+1311 more CVEs
  • CERT-FRCERTFR-2026-AVI-1253

    Multiple vulnerabilities in the Debian Linux kernel Translated from French

    Multiple vulnerabilities have been discovered in the Debian Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.

    CVE-2025-38237CVE-2025-39833CVE-2025-39925+1310 more CVEs
  • BSI CERT-BundWID-SEC-2026-3579

    Linux Kernel: Multiple vulnerabilities Translated from German

    CVE-2026-97615CVE-2026-97978CVE-2026-98127+590 more CVEs

[ References ]References