CVE-2026-98415

Received Received - Intake

Use-After-Free in Linux Kernel Exynos PMU Driver

Publication date: 2026-10-14

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node The setup_cpuhp_and_cpuidle() parses the device tree node for the interrupt generation block via of_parse_phandle() and decrements its reference count using of_node_put() immediately after fetching the resource address. However, later the intr_gen_node pointer is passed into of_syscon_register_regmap(). Fix this by declaring intr_gen_node with __free() and removing of_node_put().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98415

EUVD

EUVD-2026-101064

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	78b72897a5c8bb9d3b51fc6494a1eb09265487a4
Linux	Linux	78b72897a5c8bb9d3b51fc6494a1eb09265487a4
Linux	Linux	78b72897a5c8bb9d3b51fc6494a1eb09265487a4
Linux	Linux	6.18

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a use-after-free issue in the Samsung Exynos PMU driver. The function setup_cpuhp_and_cpuidle() incorrectly decrements the reference count of a device tree node for the interrupt generator block using of_node_put() right after fetching its address via of_parse_phandle(). Later, the intr_gen_node pointer is passed to of_syscon_register_regmap(), potentially leading to a use-after-free condition if the node is freed prematurely.

Detection Guidance

This vulnerability is specific to the Linux kernel's Samsung Exynos PMU driver and does not have direct network detection methods. To check for affected systems, inspect kernel logs for errors related to the exynos-pmu driver or use commands like 'dmesg | grep exynos-pmu' to identify issues.

Impact Analysis

This vulnerability could lead to system instability or crashes if the freed memory is accessed later. It may also create opportunities for privilege escalation or arbitrary code execution if exploited by an attacker with local access to the system.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a local kernel use-after-free issue in the Samsung Exynos PMU driver. It does not involve data exposure or unauthorized access that would typically impact such regulations.

Mitigation Strategies

Apply the Linux kernel patch that fixes the use-after-free issue in the Samsung Exynos PMU interrupt generator node handling. Update to a kernel version containing the fix for CVE-2026-98415.

Hi! I’m here to help you understand CVE-2026-98415. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70