CVE-2026-98565
Published Oct 18, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 The core and io supplies are only requested for ID_MT7530: both the devm_regulator_get() in probe and the regulator_enable() in mt7530_setup() are guarded by the switch id, but mt7530_remove() disables them unconditionally. On an MT7621 or an MT7531 both pointers are still NULL from devm_kzalloc(), so rmmod or a sysfs unbind calls regulator_disable() on NULL.
Is your site exposed to CVE-2026-98565?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/62c0e38b2e5034184d4502ce77bd178b29e59b83
https://git.kernel.org/stable/c/aae2a1f1e3a0ac5eeb439262a2328a2a392413ac
https://git.kernel.org/stable/c/bd172580e624bac00d83abd5c4320d2e14d853bc
https://git.kernel.org/stable/c/c2cdef41e0b4d8ed23a5b41e6ad4e64594e055e4
https://git.kernel.org/stable/c/e9a5298532780ecdd05c3220f3e1e3067b3537c3
Frequently Asked Questions
What is CVE-2026-98565? +
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621
The core and io supplies are only requested for ID_MT7530: both the
devm_regulator_get() in probe and the regulator_enable() in
mt7530_setup() are guarded by the switch id, but mt7530_remove()
disables them unconditionally. On an MT7621 or an MT7531 both pointers
are still NULL from devm_kzalloc(), so rmmod or a sysfs unbind calls
regulator_disable() on NULL.
How do I check if I'm vulnerable to CVE-2026-98565? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.