{"id":"CVE-2026-98415","revision":"4925f8812acc43a3912a1ab94d7474ce","records":[{"revision":"4925f8812acc43a3912a1ab94d7474ce","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98415","aliases":[],"title":"soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: samsung: exynos-pmu: fix use-after-free of interrupt generator node\n\nThe setup_cpuhp_and_cpuidle() parses the device tree node for the\ninterrupt generation block via of_parse_phandle() and decrements its\nreference count using of_node_put() immediately after fetching the resource\naddress. However, later the intr_gen_node pointer is passed into\nof_syscon_register_regmap().\n\nFix this by declaring intr_gen_node with __free() and removing\nof_node_put().","state":0,"publishedAt":"2026-10-14T13:27:46.596+00:00","modifiedAt":"2026-10-19T09:19:09.114+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/soc/samsung/exynos-pmu.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"78b72897a5c8bb9d3b51fc6494a1eb09265487a4\",\n                            \"lessThan\": \"4450102d6aa2a85b1d2d8610920fcbe45eb0ef69\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"78b72897a5c8bb9d3b51fc6494a1eb09265487a4\",\n                            \"lessThan\": \"164313e24cb0f51528bc2099c5564174ead11d8a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"78b72897a5c8bb9d3b51fc6494a1eb09265487a4\",\n                            \"lessThan\": \"4dd1999783d7d12434006289338373e49492dc96\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/soc/samsung/exynos-pmu.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.18\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.18\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.54\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.8\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/4450102d6aa2a85b1d2d8610920fcbe45eb0ef69","https://git.kernel.org/stable/c/164313e24cb0f51528bc2099c5564174ead11d8a","https://git.kernel.org/stable/c/4dd1999783d7d12434006289338373e49492dc96"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98415","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98415","identifiers":["CVE-2026-98415"]},"retained":false,"historicalAffected":[]}],"coverage":[]}