CVE-2026-98913
Published Oct 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() cavium_ptp_get() acquires a reference to the PTP PCI device through pci_get_device(). If any initialization step fails after cavium_ptp_get(), the PTP PCI device reference is leaked. Add a common error path to release the PTP reference before returning from probe failures.
Is your site exposed to CVE-2026-98913?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/2bcf59eefb9f00a2b1d426b639ee49c305a80695
https://git.kernel.org/stable/c/3a2eedb172e777f2c8608395eec42250fb355dae
https://git.kernel.org/stable/c/916d74343cd60ef7c3d433bd417d26ba31642c09
https://git.kernel.org/stable/c/c8bc44a1d86d5b432ec7f5a6f30b4e719a047374
https://git.kernel.org/stable/c/df3d586ecc580623edadec71a6ffdf4c79e2a8e8
Frequently Asked Questions
What is CVE-2026-98913? +
In the Linux kernel, the following vulnerability has been resolved:
net: thunderx: fix PTP device ref leak in nicvf_probe()
cavium_ptp_get() acquires a reference to the PTP PCI device
through pci_get_device(). If any initialization step fails
after cavium_ptp_get(), the PTP PCI device reference is leaked.
Add a common error path to release the PTP reference before
returning from probe failures.
How do I check if I'm vulnerable to CVE-2026-98913? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.