CVE-2026-98202: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-98202DEBIAN-CVE-2026-98202
Published 06-10-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-98202 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.6% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.18%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:12131-1

Timeline

  1. 06-10-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Transport drivers (such as rmi_i2c and rmi_spi) invoke rmi_driver_suspend() and rmi_driver_resume() on their child rmi_dev device during system power management events. However, transport drivers are fully registered and operational even if the physical RMI driver failed to bind or probe the rmi_dev device. When rmi_driver_suspend() or rmi_driver_resume() is called on an unbound rmi_dev, dev_get_drvdata() returns NULL. Calling rmi_disable_irq() or rmi_enable_irq() without driver data attached causes a NULL pointer dereference and General Protection Fault when attempting to lock data->enabled_mutex. Fix this by checking if driver data is attached to rmi_dev in rmi_driver_suspend() and rmi_driver_resume(), exiting early if no driver data is present.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

06-10-202621-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu168 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.113-1 | < 7.2.8-1
Linux1 product
  • linux≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < 7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4 | ≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < fafca210631d8c2d4311bdfccc5ec46b9fe65977 | ≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < 84145a4a1dc58f8959811913c5f61f3235dd9f6c | ≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < e2b6703465c1ce43edb91c1626604b7092b3c431 | ≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < 30366f507ce3e408caf7f7375bb343df54b9a4f9 | ≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < fa1713dc3d43d028d6cb66e5659d9d7e83b73362 | ≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < 942b06a19252908d0f952c0590caf20e47f88252 | ≥ 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56, < fe10579b6dc3f0dac61e51e1797cacbba5039ac2 | 4.6

3 vendors · 170 products

References

12 links
Show all 12 references