CVE-2026-98397
kernel: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 14, 2026
Updated · October 16, 2026
Description
A flaw was found in the Linux kernel's x86-android-tablets driver. During device initialization, the driver saves a pointer to a device structure without incrementing its reference count, while dropping the active reference prematurely. If the device is released before driver teardown, a local user could trigger a use-after-free condition. This flaw can lead to a Denial of Service (DoS) through a system crash or potentially allow privilege escalation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-825 · Expired Pointer Dereference