Live › vulnerability › CVE-2026-98435
Go to dashboardIn the Linux kernel's Altera EDAC driver, the devres group and managed IRQ requests in altr_portb_setup() were tied to a copied per-port embedded device instead of the real parent device, so the group and its resources could be torn down inconsistently. The sources describe this as a resource-lifetime fix and do not state what an attacker gains.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera: Use parent device for devres in altr_portb_setup()
Anchor the devres group and the devm-managed IRQ requests in altr_portb_setup() to the actual parent device (device->edac->dev) instead of the embedded struct device inside the copied per-port altr_edac_device_dev.
This keeps devres_open_group(), devm_request_irq(), devres_remove_group() and devres_release_group() all referring to the same long-lived device so the group and the resources allocated inside it are torn down together.
This page as .md · .json · in your agent: get_signal("CVE-2026-98435")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.