Strix
73.2K

CVE-2026-98855

UnknownEPSS 0.16%

Last modified

CVE-2026-98855 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node's deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay's node is released. Record the changeset entry first and link the property into deadprops only on success. EPSS estimates a 0.16% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node's deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay's node is released. Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node's property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.

Metrics

EPSS Probability
0.16%

4.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f96278810150fc39085d1872e5b39ea06366d03e, < 004a0ee2e5315f1245775b369fcb940e8cda3807; >= f96278810150fc39085d1872e5b39ea06366d03e, < f6f70b12ae3e4074e4cd3f42cd66fd482ce7a4b5; >= f96278810150fc39085d1872e5b39ea06366d03e, < 50c3663790c61648a51f197970f660fd543269a7; >= f96278810150fc39085d1872e5b39ea06366d03e, < 936f1ffcb87a1c50938a21176a6463af162cf4b5; >= f96278810150fc39085d1872e5b39ea06366d03e, < d5151496a0a2b19c9c0c7b0ebf86b3de55a8fa3a; >= f96278810150fc39085d1872e5b39ea06366d03e, < 7dc6a769153c0457077a0da4888a00f61e66de15; >= f96278810150fc39085d1872e5b39ea06366d03e, < 5857035a3b53a4e7b5a0d5a740189901ece0b079; >= f96278810150fc39085d1872e5b39ea06366d03e, < 814f2da6995772c07a7c9c2cc6028b6e3f3ecc9c; b52ca352489be8beb7de3a8181509a0deaf72e21; >= 4.19.49, < 4.20
LinuxLinux5.0

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98855?
In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node's deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay's node is released. Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node's property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.
How severe is CVE-2026-98855?
Severity scoring for CVE-2026-98855 is pending analysis. The EPSS model estimates a 0.16% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98855?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98855?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST