CVE-2026-98620
N/AIn the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure If register_netdev() fails for one of the MTK_MAX_DEVS devices in mtk_probe(), the error path jumps to err_deinit_ppe, skipping mtk_unreg_dev(). The previously registered net_devices are then freed by mtk_free_dev() while still in NETREG_REGISTERED state, hitting the BUG_ON(dev->reg_state != NETREG_UNREGISTERED). Route the register_netdev() failure to err_unreg_netdev so the net_devices registered so far are properly unregistered before being freed.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 9th percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept & exploit code
- github-search Search GitHub for public PoC repos
Test against your own equipment
curl -s https://vulnpedia.com/cve/CVE-2026-98620/poc.jsonMachine-readable PoC index for this CVE (for automation).Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-98620/poc.json
References
Technical & other
- https://git.kernel.org/stable/c/245bea0c7ab278150c70366bdeb69b901327133c
- https://git.kernel.org/stable/c/ab3bde3b3e56331b4f53a1f6cf4e5e9d1c14c1a0
- https://git.kernel.org/stable/c/7254b702e556158e34b4d7c168b5d8e7da5978af
- https://git.kernel.org/stable/c/0fdb944d4df02223c67d5e65c4c134ecb57a5668
- https://git.kernel.org/stable/c/310d1ac61a4d5a2ca8356a3a48d263acf54503ce