CVE-2026-98415

high

Description

In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node The setup_cpuhp_and_cpuidle() parses the device tree node for the interrupt generation block via of_parse_phandle() and decrements its reference count using of_node_put() immediately after fetching the resource address. However, later the intr_gen_node pointer is passed into of_syscon_register_regmap(). Fix this by declaring intr_gen_node with __free() and removing of_node_put().

References

https://git.kernel.org/stable/c/4dd1999783d7d12434006289338373e49492dc96

https://git.kernel.org/stable/c/4450102d6aa2a85b1d2d8610920fcbe45eb0ef69

https://git.kernel.org/stable/c/164313e24cb0f51528bc2099c5564174ead11d8a

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101064

Details

Source: Mitre, NVD

Published: 2026-10-14

Updated: 2026-10-14

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Severity: High