Live › vulnerability › CVE-2026-98740
Go to dashboardSome Altera EDAC ECC setup functions were marked __init, so a probe that runs after boot-time init memory is freed (for example a deferred probe or a manual rebind) can call freed code. The fix removes __init from those functions so they stay valid at runtime.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only systems running Linux kernels with the Altera EDAC driver, typically Intel/Altera SoC boards, where the driver is built in or loaded. Hosts without Altera SoC hardware or without this driver can skip it. The sources do not say which kernel versions are fixed.
No product ranges from the sources yet.
uname -r to find the running kernel versionlsmod | grep altera_edacEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera: Drop __init from ECC setup paths for re-probe safety
Sashiko reports:
"Does suppressing sysfs unbinding fully prevent the execution of freed __init memory? If altr_sysmgr_regmap_lookup_by_phandle() returns -EPROBE_DEFER, the probe is deferred until after __init memory is freed."
The a10 EDAC .setup callbacks (sdmmc, ethernet, nand, dma, usb, qspi) and their helpers (altr_init_a10_ecc_device_type, altr_init_a10_ecc_block) were marked __init. These run from the probe path, which may execute after init memory is freed -- e.g. a probe deferred via -EPROBE_DEFER that only succeeds once a late/module dependency appears, or a manual unbind/rebind. Calling __init code then dereferences freed memory. Remove __init so these functions remain valid at runtime.
This page as .md · .json · in your agent: get_signal("CVE-2026-98740")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.