---
id: CVE-2026-98913
title: 'net: thunderx: fix PTP device ref leak in nicvf_probe()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: thunderx: fix PTP device ref leak in nicvf_probe()

  cavium_ptp_get() acquires a reference to the PTP PCI device
  through pci_get_device(). If any initialization ste…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4a8755096466d1002236ac7293eae821b6de87ba <
    3a2eedb172e777f2c8608395eec42250fb355dae
  - >-
    Linux >= 4a8755096466d1002236ac7293eae821b6de87ba <
    c8bc44a1d86d5b432ec7f5a6f30b4e719a047374
  - >-
    Linux >= 4a8755096466d1002236ac7293eae821b6de87ba <
    df3d586ecc580623edadec71a6ffdf4c79e2a8e8
  - >-
    Linux >= 4a8755096466d1002236ac7293eae821b6de87ba <
    916d74343cd60ef7c3d433bd417d26ba31642c09
  - >-
    Linux >= 4a8755096466d1002236ac7293eae821b6de87ba <
    2bcf59eefb9f00a2b1d426b639ee49c305a80695
  - Linux 4.16
published: '2026-10-23'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T06:56:43.960Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98913'
references:
  - url: 'https://git.kernel.org/stable/c/3a2eedb172e777f2c8608395eec42250fb355dae'
  - url: 'https://git.kernel.org/stable/c/c8bc44a1d86d5b432ec7f5a6f30b4e719a047374'
  - url: 'https://git.kernel.org/stable/c/df3d586ecc580623edadec71a6ffdf4c79e2a8e8'
  - url: 'https://git.kernel.org/stable/c/916d74343cd60ef7c3d433bd417d26ba31642c09'
  - url: 'https://git.kernel.org/stable/c/2bcf59eefb9f00a2b1d426b639ee49c305a80695'
tags:
  - cve.org
epss: 0.00174
epssPercentile: 0.06826
ingestedAt: '2026-10-23T13:24:55.571Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: thunderx: fix PTP device ref leak in nicvf_probe()

cavium_ptp_get() acquires a reference to the PTP PCI device
through pci_get_device(). If any initialization step fails
after cavium_ptp_get(), the PTP PCI device reference is leaked.
Add a common error path to release the PTP reference before
returning from probe failures.

## Affected

- `Linux >= 4a8755096466d1002236ac7293eae821b6de87ba < 3a2eedb172e777f2c8608395eec42250fb355dae`
- `Linux >= 4a8755096466d1002236ac7293eae821b6de87ba < c8bc44a1d86d5b432ec7f5a6f30b4e719a047374`
- `Linux >= 4a8755096466d1002236ac7293eae821b6de87ba < df3d586ecc580623edadec71a6ffdf4c79e2a8e8`
- `Linux >= 4a8755096466d1002236ac7293eae821b6de87ba < 916d74343cd60ef7c3d433bd417d26ba31642c09`
- `Linux >= 4a8755096466d1002236ac7293eae821b6de87ba < 2bcf59eefb9f00a2b1d426b639ee49c305a80695`
- `Linux 4.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.