---
id: CVE-2026-98913
title: 'net: thunderx: fix PTP device ref leak in nicvf_probe()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: thunderx: fix PTP device ref leak in nicvf_probe()

  cavium_ptp_get() acquires a reference to the PTP PCI device
  through pci_get_device(). If any initialization ste…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    3a2eedb172e777f2c8608395eec42250fb355dae
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    c8bc44a1d86d5b432ec7f5a6f30b4e719a047374
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    df3d586ecc580623edadec71a6ffdf4c79e2a8e8
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    916d74343cd60ef7c3d433bd417d26ba31642c09
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    2bcf59eefb9f00a2b1d426b639ee49c305a80695
  - Linux < 6.1.189
  - Linux < 6.6.158
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:55:08.297Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98913'
references:
  - url: 'https://git.kernel.org/stable/c/3a2eedb172e777f2c8608395eec42250fb355dae'
  - url: 'https://git.kernel.org/stable/c/c8bc44a1d86d5b432ec7f5a6f30b4e719a047374'
  - url: 'https://git.kernel.org/stable/c/df3d586ecc580623edadec71a6ffdf4c79e2a8e8'
  - url: 'https://git.kernel.org/stable/c/916d74343cd60ef7c3d433bd417d26ba31642c09'
  - url: 'https://git.kernel.org/stable/c/2bcf59eefb9f00a2b1d426b639ee49c305a80695'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.571Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: thunderx: fix PTP device ref leak in nicvf_probe()

cavium_ptp_get() acquires a reference to the PTP PCI device
through pci_get_device(). If any initialization step fails
after cavium_ptp_get(), the PTP PCI device reference is leaked.
Add a common error path to release the PTP reference before
returning from probe failures.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 3a2eedb172e777f2c8608395eec42250fb355dae`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c8bc44a1d86d5b432ec7f5a6f30b4e719a047374`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < df3d586ecc580623edadec71a6ffdf4c79e2a8e8`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 916d74343cd60ef7c3d433bd417d26ba31642c09`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2bcf59eefb9f00a2b1d426b639ee49c305a80695`
- `Linux < 6.1.189`
- `Linux < 6.6.158`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.