CVE-2026-98496 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 Airoha NPU Watchdog airoha_npu_remove use after free

October 18, 2026 Yanac

A vulnerability was found in Linux Kernel up to 6.18.54/7.2.8/7.3-rc4. It has been classified as very critical. This impacts the function airoha_npu_remove of the component Airoha NPU Watchdog. The manipulation leads to use after free.

This vulnerability is traded as CVE-2026-98496. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More