CVE-2026-98435EDAC/altera: Use parent device for devres in altr_portb_setup()
- —Not scoredno CVSS score yet
- 0.16%Exploitation in 30 daysEPSS · top 95% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres group and the devm-managed IRQ requests in altr_portb_setup() to the actual parent device (device->edac->dev) instead of the embedded struct device inside the copied per-port altr_edac_device_dev. This keeps devres_open_group(), devm_request_irq(), devres_remove_group() and devres_release_group() all referring to the same long-lived device so the group and the resources allocated inside it are torn down together.
Timeline
ID reserved
By Linux
- 23 days later
· 23 days later
Published
- 1 day later
· 1 day later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.16% · top 95% of all CVEs (14 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 911049845d7096c27304930ff478cbf3f2623ba3 – < 8325ecf3f16d764a0e0ba42c95b63f08e38710a8
- affected 911049845d7096c27304930ff478cbf3f2623ba3 – < 2cf03ada03532bfb42f06fbf01d9e2a99e6011d7
- affected 911049845d7096c27304930ff478cbf3f2623ba3 – < dc4797c909b6cacb1bb24449e6c57d50a14d73bf
- affected 911049845d7096c27304930ff478cbf3f2623ba3 – < 9868f5c077dfe0b606331f2e782484f91a5789a5
- affected 4.9
- unaffected < 4.9
- unaffected 6.12.112 – ≤ 6.12.*
- unaffected 6.18.53 – ≤ 6.18.*
- unaffected 7.2.7 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References4
- https://git.kernel.org/stable/c/8325ecf3f16d764a0e0ba42c95b63f08e38710a8 (opens in a new tab)
- https://git.kernel.org/stable/c/2cf03ada03532bfb42f06fbf01d9e2a99e6011d7 (opens in a new tab)
- https://git.kernel.org/stable/c/dc4797c909b6cacb1bb24449e6c57d50a14d73bf (opens in a new tab)
- https://git.kernel.org/stable/c/9868f5c077dfe0b606331f2e782484f91a5789a5 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-103674 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-98435)Record last updated .