Strix
73.1K

CVE-2026-98435

Unknown

Last modified

CVE-2026-98435 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres group and the devm-managed IRQ requests in altr_portb_setup() to the actual parent device (device->edac->dev) instead of the embedded struct device inside the copied per-port altr_edac_device_dev. This keeps devres_open_group(), devm_request_irq(), devres_remove_group() and devres_release_group() all referring to the same long-lived device so the group and the resources allocated inside it are torn down together..

Description

In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres group and the devm-managed IRQ requests in altr_portb_setup() to the actual parent device (device->edac->dev) instead of the embedded struct device inside the copied per-port altr_edac_device_dev. This keeps devres_open_group(), devm_request_irq(), devres_remove_group() and devres_release_group() all referring to the same long-lived device so the group and the resources allocated inside it are torn down together.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 911049845d7096c27304930ff478cbf3f2623ba3, < 8325ecf3f16d764a0e0ba42c95b63f08e38710a8; >= 911049845d7096c27304930ff478cbf3f2623ba3, < 2cf03ada03532bfb42f06fbf01d9e2a99e6011d7; >= 911049845d7096c27304930ff478cbf3f2623ba3, < dc4797c909b6cacb1bb24449e6c57d50a14d73bf; >= 911049845d7096c27304930ff478cbf3f2623ba3, < 9868f5c077dfe0b606331f2e782484f91a5789a5
LinuxLinux4.9

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98435?
In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres group and the devm-managed IRQ requests in altr_portb_setup() to the actual parent device (device->edac->dev) instead of the embedded struct device inside the copied per-port altr_edac_device_dev. This keeps devres_open_group(), devm_request_irq(), devres_remove_group() and devres_release_group() all referring to the same long-lived device so the group and the resources allocated inside it are torn down together.
How severe is CVE-2026-98435?
Severity scoring for CVE-2026-98435 is pending analysis.
How do I fix CVE-2026-98435?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98435?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST