CVE-2026-98855
Received Received - Intake

Linux Kernel Property Handling Use-After-Free

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node's deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay's node is released. Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node's property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-19
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98855
EUVD
EUVD-2026-103795

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
Linux Linux f96278810150fc39085d1872e5b39ea06366d03e
Linux Linux f96278810150fc39085d1872e5b39ea06366d03e
Linux Linux f96278810150fc39085d1872e5b39ea06366d03e
Linux Linux f96278810150fc39085d1872e5b39ea06366d03e
Linux Linux b52ca352489be8beb7de3a8181509a0deaf72e21
Linux Linux 4.19.49
Linux Linux 5.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where a property is incorrectly linked to a deadprops list before an operation succeeds. If the operation fails, the property is freed but remains linked, causing a double-free when the node is released later.

Detection Guidance

This vulnerability is specific to the Linux kernel's overlay filesystem implementation. Detection requires checking kernel logs for overlay-related errors or crashes. Monitor dmesg or journalctl for messages about overlayfs or changeset failures. No direct commands detect this flaw, but kernel version checks and log monitoring are essential.

Impact Analysis

This could lead to system crashes, kernel memory corruption, or potential privilege escalation if exploited. It affects systems running vulnerable Linux kernel versions with overlayfs functionality.

Compliance Impact

This vulnerability is a Linux kernel memory management issue that could lead to double-free errors during overlay operations. It does not directly impact compliance with standards like GDPR or HIPAA as it is not a data privacy or access control flaw. However, if exploited, it could cause system instability or crashes, potentially affecting availability of systems handling regulated data.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Avoid using overlayfs features if an immediate update is not possible. Monitor kernel security advisories for patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98855. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart