CVE-2026-98415 is a vulnerability in Linux Kernel
Published on October 14, 2026
soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
In the Linux kernel, the following vulnerability has been resolved:
soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
The setup_cpuhp_and_cpuidle() parses the device tree node for the
interrupt generation block via of_parse_phandle() and decrements its
reference count using of_node_put() immediately after fetching the resource
address. However, later the intr_gen_node pointer is passed into
of_syscon_register_regmap().
Fix this by declaring intr_gen_node with __free() and removing
of_node_put().
Products Associated with CVE-2026-98415
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 and below 4450102d6aa2a85b1d2d8610920fcbe45eb0ef69 is affected.
- Version 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 and below 164313e24cb0f51528bc2099c5564174ead11d8a is affected.
- Version 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 and below 4dd1999783d7d12434006289338373e49492dc96 is affected.
- Version 6.18 is affected.
- Before 6.18 is unaffected.
- Version 6.18.54, <= 6.18.* is unaffected.
- Version 7.2.8, <= 7.2.* is unaffected.
- Version 7.3-rc4, <= * is unaffected.