# host1x: bus: Fix missing ops null check in error teardown

CVE record · `CVE-2026-98876`

- **Identifiers:** `CVE-2026-98876`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 23 Oct 2026
- **Updated:** 26 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 23 Oct 2026, 11:37 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before d8d5b6e02fc281dea33d6b0b0fadaccea56f2067` (git)
  - affected: `8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before f1fa6c936fa9de80ae446ba5e76e227e991b8e56` (git)
  - affected: `8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 74bd1f05d9ba2d6672d30ccafe80a38104c1f73f` (git)
  - affected: `8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 62851e7b0e55de6fe08da08bc41fd587fbcb0e9b` (git)
  - affected: `8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 29375e071ea201fe97bafe1d2ad9d9f30311abfb` (git)
  - affected: `8f7da1578e90bf1af30269dc6dd8806c96e9c683 to before 71d25f668bc5c0f36ea843462e12307dea45aaa3` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `4.16`
  - unaffected: `before 4.16` (semver)
  - unaffected: `5.15.222 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.189 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.158 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.111 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.53 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 23 Oct 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-98876](https://www.cve.org/CVERecord?id=CVE-2026-98876)
- [NVD: CVE-2026-98876](https://nvd.nist.gov/vuln/detail/CVE-2026-98876)

### References from the CNA

- <https://git.kernel.org/stable/c/d8d5b6e02fc281dea33d6b0b0fadaccea56f2067>
- <https://git.kernel.org/stable/c/f1fa6c936fa9de80ae446ba5e76e227e991b8e56>
- <https://git.kernel.org/stable/c/74bd1f05d9ba2d6672d30ccafe80a38104c1f73f>
- <https://git.kernel.org/stable/c/62851e7b0e55de6fe08da08bc41fd587fbcb0e9b>
- <https://git.kernel.org/stable/c/29375e071ea201fe97bafe1d2ad9d9f30311abfb>
- <https://git.kernel.org/stable/c/71d25f668bc5c0f36ea843462e12307dea45aaa3>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-98876>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-98876/>. Everything for agents: <https://agentprime.io/llms.txt>.