---
id: CVE-2026-98932
title: 'EDAC/altera: Fix use-after-free in error paths'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  EDAC/altera: Fix use-after-free in error paths

  In both altr_edac_a10_device_add() and altr_portb_setup(), the error path
  freed the dci structure before releasing the d…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 588cb03ea208b303e6dee7e916f329043fd0fc26 <
    865f3bdebbc9b34012358c377c9b15154f95f33b
  - >-
    Linux >= 588cb03ea208b303e6dee7e916f329043fd0fc26 <
    87364b19b3fe4e6dbf88d6acf6db4ec87e7dfbba
  - >-
    Linux >= 588cb03ea208b303e6dee7e916f329043fd0fc26 <
    eef3b67f9c6782127163b631c9043011a68016e2
  - Linux 4.7
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:11:35.940Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98932'
references:
  - url: 'https://git.kernel.org/stable/c/865f3bdebbc9b34012358c377c9b15154f95f33b'
  - url: 'https://git.kernel.org/stable/c/87364b19b3fe4e6dbf88d6acf6db4ec87e7dfbba'
  - url: 'https://git.kernel.org/stable/c/eef3b67f9c6782127163b631c9043011a68016e2'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.564Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

EDAC/altera: Fix use-after-free in error paths

In both altr_edac_a10_device_add() and altr_portb_setup(), the error path
freed the dci structure before releasing the devres group. Since the managed
single and double bit IRQ handlers use altdev(dci->pvt_info) as their data, an
IRQ firing between freeing dci and unregistering the IRQs could dereference
the freed memory.

Release the devres group first so the managed IRQs are unregistered
before the dci structure is freed.

## Affected

- `Linux >= 588cb03ea208b303e6dee7e916f329043fd0fc26 < 865f3bdebbc9b34012358c377c9b15154f95f33b`
- `Linux >= 588cb03ea208b303e6dee7e916f329043fd0fc26 < 87364b19b3fe4e6dbf88d6acf6db4ec87e7dfbba`
- `Linux >= 588cb03ea208b303e6dee7e916f329043fd0fc26 < eef3b67f9c6782127163b631c9043011a68016e2`
- `Linux 4.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.