Linux Kernel Vulnerability in EDAC/Altera for Device Management

CVE-2026-98435

What is CVE-2026-98435?

A vulnerability in the Linux kernel's EDAC/Altera component impacts how device resources are managed. Specifically, the devres group along with devm-managed IRQ requests in the altr_portb_setup() function failed to properly link to the actual parent device. Instead, they were associated with an embedded struct device within the per-port altr_edac_device_dev, which led to improper resource handling. This could result in issues with resource allocation and deallocation, making the system more susceptible to potential conflicts and instability. Proper anchoring to the parent device is crucial for maintaining system integrity and ensuring that resources allocated are correctly torn down with the parent device.

References