CVE-2026-98415

Source
https://cve.org/CVERecord?id=CVE-2026-98415
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98415.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98415
Downstream
Published
2026-10-14T13:27:46Z
Modified
2026-10-15T02:47:34Z
Summary
soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
Details

In the Linux kernel, the following vulnerability has been resolved:

soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

The setup_cpuhp_and_cpuidle() parses the device tree node for the interrupt generation block via of_parse_phandle() and decrements its reference count using of_node_put() immediately after fetching the resource address. However, later the intr_gen_node pointer is passed into of_syscon_register_regmap().

Fix this by declaring intr_gen_node with __free() and removing of_node_put().

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98415.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
78b72897a5c8bb9d3b51fc6494a1eb09265487a4
Fixed
4450102d6aa2a85b1d2d8610920fcbe45eb0ef69
Fixed
164313e24cb0f51528bc2099c5564174ead11d8a
Fixed
4dd1999783d7d12434006289338373e49492dc96

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98415.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.54
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98415.json"