---
id: CVE-2026-98415
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

  The setup_cpuhp_and_cpuidle() parses the device tree node for the
  interrupt generation block v…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

  The setup_cpuhp_and_cpuidle() parses the device tree node for the
  interrupt generation block v…
severity: medium
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T14:17:52.793'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98415'
references:
  - url: 'https://git.kernel.org/stable/c/164313e24cb0f51528bc2099c5564174ead11d8a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4450102d6aa2a85b1d2d8610920fcbe45eb0ef69'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4dd1999783d7d12434006289338373e49492dc96'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98415.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98415'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2552231'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98415'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98415'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98415.mbox
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
ingestedAt: '2026-10-14T15:36:13.986Z'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 <
    4450102d6aa2a85b1d2d8610920fcbe45eb0ef69
  - >-
    Linux >= 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 <
    164313e24cb0f51528bc2099c5564174ead11d8a
  - >-
    Linux >= 78b72897a5c8bb9d3b51fc6494a1eb09265487a4 <
    4dd1999783d7d12434006289338373e49492dc96
  - Linux 6.18
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe:
  - CWE-825
epss: 0.00207
epssPercentile: 0.10677
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

The setup_cpuhp_and_cpuidle() parses the device tree node for the
interrupt generation block via of_parse_phandle() and decrements its
reference count using of_node_put() immediately after fetching the resource
address. However, later the intr_gen_node pointer is passed into
of_syscon_register_regmap().

Fix this by declaring intr_gen_node with __free() and removing
of_node_put().

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98415.json)