Use-after-free in Linux kernel - CVE-2026-98415

Vulnerability identifier: #VU155908

CSH Severity: Low

CVSS v4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98415

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause the kernel to access freed memory.

The vulnerability exists due to use-after-free in setup_cpuhp_and_cpuidle() in the Samsung Exynos PMU driver when processing the interrupt generator device tree node. A local user can trigger the affected initialization path to cause the kernel to access freed memory.

The node reference is released after its resource address is retrieved, but the node pointer is subsequently passed to of_syscon_register_regmap().

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/164313e24cb0f51528bc2099c5564174ead11d8a
• https://git.kernel.org/stable/c/4450102d6aa2a85b1d2d8610920fcbe45eb0ef69
• https://git.kernel.org/stable/c/4dd1999783d7d12434006289338373e49492dc96

• Use-after-free in Linux kernel soc samsung driver
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more