Live › vulnerability › CVE-2026-98932
Go to dashboardIn the Linux kernel's Altera EDAC driver, error paths free a data structure before the managed interrupt handlers that use it are unregistered. An interrupt firing in that window can read freed memory, causing a use-after-free.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Linux kernels with the Altera EDAC driver loaded, typically Altera/Intel SoC hardware with the error-detection memory controller. Systems without that hardware or without this driver loaded are unlikely to be affected. The sources do not say which kernel versions are fixed.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera: Fix use-after-free in error paths
In both altr_edac_a10_device_add() and altr_portb_setup(), the error path freed the dci structure before releasing the devres group. Since the managed single and double bit IRQ handlers use altdev(dci->pvt_info) as their data, an IRQ firing between freeing dci and unregistering the IRQs could dereference the freed memory.
Release the devres group first so the managed IRQs are unregistered before the dci structure is freed.
This page as .md · .json · in your agent: get_signal("CVE-2026-98932")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.