CVE-2026-98435
Received Received - Intake

EDAC/altera PortB Setup Parent Device Use-After-Free Fix

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres group and the devm-managed IRQ requests in altr_portb_setup() to the actual parent device (device->edac->dev) instead of the embedded struct device inside the copied per-port altr_edac_device_dev. This keeps devres_open_group(), devm_request_irq(), devres_remove_group() and devres_release_group() all referring to the same long-lived device so the group and the resources allocated inside it are torn down together.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98435
EUVD
EUVD-2026-103674

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 911049845d7096c27304930ff478cbf3f2623ba3
Linux Linux 911049845d7096c27304930ff478cbf3f2623ba3
Linux Linux 911049845d7096c27304930ff478cbf3f2623ba3
Linux Linux 911049845d7096c27304930ff478cbf3f2623ba3
Linux Linux 4.9

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory management issue in the EDAC/altera driver. The problem occurs in the altr_portb_setup() function where device resources and IRQ requests were incorrectly anchored to a temporary device structure instead of the parent device. This could lead to improper cleanup of resources when the device is removed.

Detection Guidance

This vulnerability is specific to the Linux kernel's EDAC/altera module. Detection requires checking the kernel version and whether the affected code path is present. Use commands like uname -a to check kernel version and grep for altr_portb_setup in kernel logs or source code.

Impact Analysis

If exploited, this vulnerability could cause system instability or crashes due to improper resource management. It may lead to memory leaks or unexpected behavior in systems using the affected EDAC/altera driver, potentially disrupting services relying on error detection and correction.

Mitigation Strategies

Apply the latest kernel update from your Linux distribution to patch this vulnerability. If an update is not immediately available, consider disabling the EDAC/altera module by blacklisting it or recompiling the kernel without the affected module.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98435. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart