CVE-2026-98415

CVE-2026-98415

published October 14, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

The setup_cpuhp_and_cpuidle() parses the device tree node for the

interrupt generation block via of_parse_phandle() and decrements its

reference count using of_node_put() immediately after fetching the resource

address. However, later the intr_gen_node pointer is passed into

of_syscon_register_regmap().

Fix this by declaring intr_gen_node with __free() and removing

of_node_put().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-10-14T18:17Z
References (3)
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 13:27Z
    soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
    cvelistv5
  • 14 OCT 13:27Z
    soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node
    cvelistv5