CVE-2026-98657

A flaw was found in the Linux kernel's PulsedLight LIDAR sensor driver. When device initialization fails during power management setup, the driver fails to properly unregister the device before releasing its allocated memory. This leaves active system interfaces pointing to released memory, creating a use-after-free condition where the system references deallocated resources. A local user could interact with these lingering device interfaces to potentially execute arbitrary code or cause a Denial of Service (DoS) by crashing the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.