CVE-2026-98199

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98199", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.324Z", "datePublished": "2026-10-06T08:44:37.623Z", "dateUpdated": "2026-10-19T09:15:30.300Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:15:30.300Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (pmbus/core) increase number of phases and add new mask\n\nIncrease the number of phases to 16 as a new upcoming device supports\nsuch a number.\n\nWhile at it, add a new mask for controlling the source of the output\nvoltage.\n\nNote (groeck):\n\nThis patch was meant to prepare for support of MAX20826 and compatible\ndevices, which support more than 10 phases per page. However, Sashiko\nreports that the mp2975 driver already supports up to 14 phases, and the\nmp2856 driver supports up to 12 phases. This already has the potential for\nout-of-bounds writes when probing the affected chips, making this patch a\nbug fix."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/pmbus/pmbus.h"], "versions": [{"version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "lessThan": "272006a52cbd9c8342cead4d3eb9221ebbe8b985", "status": "affected", "versionType": "git"}, {"version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "lessThan": "b32607710a20ad983f9fe4a3051892584c0641a4", "status": "affected", "versionType": "git"}, {"version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "lessThan": "66368f682a53f3a3842e20eebb571a59809c52c0", "status": "affected", "versionType": "git"}, {"version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "lessThan": "1ec644c94466834f8cb6b7ba12636fd047bdfdda", "status": "affected", "versionType": "git"}, {"version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "lessThan": "9558fc1e042ac6b12dd63c37d2c51be4ec86d402", "status": "affected", "versionType": "git"}, {"version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "lessThan": "b49f100a15b8876deccf8c59f41af92b8e25fd74", "status": "affected", "versionType": "git"}, {"version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "lessThan": "06bd6794b5fd2163880ac3bfe973d4cc61f359f3", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/hwmon/pmbus/pmbus.h"], "versions": [{"version": "5.10", "status": "affected"}, {"version": "0", "lessThan": "5.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.54", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.8", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.18.54"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.2.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/272006a52cbd9c8342cead4d3eb9221ebbe8b985"}, {"url": "https://git.kernel.org/stable/c/b32607710a20ad983f9fe4a3051892584c0641a4"}, {"url": "https://git.kernel.org/stable/c/66368f682a53f3a3842e20eebb571a59809c52c0"}, {"url": "https://git.kernel.org/stable/c/1ec644c94466834f8cb6b7ba12636fd047bdfdda"}, {"url": "https://git.kernel.org/stable/c/9558fc1e042ac6b12dd63c37d2c51be4ec86d402"}, {"url": "https://git.kernel.org/stable/c/b49f100a15b8876deccf8c59f41af92b8e25fd74"}, {"url": "https://git.kernel.org/stable/c/06bd6794b5fd2163880ac3bfe973d4cc61f359f3"}], "title": "hwmon: (pmbus/core) increase number of phases and add new mask", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/hwmon/pmbus/pmbus.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "272006a52cbd9c8342cead4d3eb9221ebbe8b985", "status": "affected", "version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "versionType": "git"}, {"lessThan": "b32607710a20ad983f9fe4a3051892584c0641a4", "status": "affected", "version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "versionType": "git"}, {"lessThan": "66368f682a53f3a3842e20eebb571a59809c52c0", "status": "affected", "version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "versionType": "git"}, {"lessThan": "1ec644c94466834f8cb6b7ba12636fd047bdfdda", "status": "affected", "version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "versionType": "git"}, {"lessThan": "9558fc1e042ac6b12dd63c37d2c51be4ec86d402", "status": "affected", "version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "versionType": "git"}, {"lessThan": "b49f100a15b8876deccf8c59f41af92b8e25fd74", "status": "affected", "version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "versionType": "git"}, {"lessThan": "06bd6794b5fd2163880ac3bfe973d4cc61f359f3", "status": "affected", "version": "2c6fcbb211494f1ff6ef384776944b9e04f4c14c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/hwmon/pmbus/pmbus.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"lessThan": "5.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.54", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (pmbus/core) increase number of phases and add new mask\n\nIncrease the number of phases to 16 as a new upcoming device supports\nsuch a number.\n\nWhile at it, add a new mask for controlling the source of the output\nvoltage.\n\nNote (groeck):\n\nThis patch was meant to prepare for support of MAX20826 and compatible\ndevices, which support more than 10 phases per page. However, Sashiko\nreports that the mp2975 driver already supports up to 14 phases, and the\nmp2856 driver supports up to 12 phases. This already has the potential for\nout-of-bounds writes when probing the affected chips, making this patch a\nbug fix."}], "id": "CVE-2026-98199", "lastModified": "2026-10-19T10:18:20.450", "metrics": {}, "published": "2026-10-06T09:18:05.597", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/06bd6794b5fd2163880ac3bfe973d4cc61f359f3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1ec644c94466834f8cb6b7ba12636fd047bdfdda"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/272006a52cbd9c8342cead4d3eb9221ebbe8b985"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/66368f682a53f3a3842e20eebb571a59809c52c0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9558fc1e042ac6b12dd63c37d2c51be4ec86d402"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b32607710a20ad983f9fe4a3051892584c0641a4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b49f100a15b8876deccf8c59f41af92b8e25fd74"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: hwmon: (pmbus/core) increase number of phases and add new mask", "id": "2546453", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2546453"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["A flaw was found in the Linux kernel's Power Management Bus (PMBus) subsystem. This vulnerability allows an attacker capable of triggering the probing of affected power management devices to cause a Denial of Service (DoS) or memory corruption. The issue stems from certain hardware drivers supporting more phases than allocated by the core framework, resulting in an out-of-bounds write during device initialization. Consequently, the flaw can destabilize the operating system and crash the kernel."], "name": "CVE-2026-98199", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98199\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98199\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98199.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2c6fcbb211494f1ff6ef384776944b9e04f4c14c,272006a52cbd9c8342cead4d3eb9221ebbe8b985)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2c6fcbb211494f1ff6ef384776944b9e04f4c14c,b32607710a20ad983f9fe4a3051892584c0641a4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2c6fcbb211494f1ff6ef384776944b9e04f4c14c,66368f682a53f3a3842e20eebb571a59809c52c0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2c6fcbb211494f1ff6ef384776944b9e04f4c14c,1ec644c94466834f8cb6b7ba12636fd047bdfdda)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2c6fcbb211494f1ff6ef384776944b9e04f4c14c,9558fc1e042ac6b12dd63c37d2c51be4ec86d402)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2c6fcbb211494f1ff6ef384776944b9e04f4c14c,b49f100a15b8876deccf8c59f41af92b8e25fd74)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2c6fcbb211494f1ff6ef384776944b9e04f4c14c,06bd6794b5fd2163880ac3bfe973d4cc61f359f3)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.10"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[5.15.222,5.15.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.1.189,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.158,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.112,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.54,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2.8,7.2.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc4,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-06T15:00:17.484811+00:00", "updated": "2026-10-09T03:30:06.903380+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}