CVE-2026-98415
Received
Received - Intake
Use-After-Free in Linux Kernel Exynos PMU Driver
Vulnerability report for CVE-2026-98415, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
The setup_cpuhp_and_cpuidle() parses the device tree node for the
interrupt generation block via of_parse_phandle() and decrements its
reference count using of_node_put() immediately after fetching the resource
address. However, later the intr_gen_node pointer is passed into
of_syscon_register_regmap().
Fix this by declaring intr_gen_node with __free() and removing
of_node_put().
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 |
| Linux | Linux | 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 |
| Linux | Linux | 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 |
| Linux | Linux | 6.18 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
