Skip to main content
CVE-2026-98435VulnerabilityPublished Updated

altr_portb_setup() · EDAC/altera: Use parent device for devres

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-98435

Not known to be exploited · fixed in dc4797c909b6cacb1bb24449e6c57d50a14d73bf : update Microsoft when convenient.

Data as of 28 Oct 2026, 09:29 UTC

Severity
Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in dc4797c909b6cacb1bb24449e6c57d50a14d73bf, 9868f5c077dfe0b606331f2e782484f91a5789a5, 8325ecf3f16d764a0e0ba42c95b63f08e38710a8 +1

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux to dc4797c909b6cacb1bb24449e6c57d50a14d73bf, 9868f5c077dfe0b606331f2e782484f91a5789a5, 8325ecf3f16d764a0e0ba42c95b63f08e38710a8 or 2cf03ada03532bfb42f06fbf01d9e2a99e6011d7.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 911049845d7096c27304930ff478cbf3f2623ba3, < dc4797c909b6cacb1bb24449e6c57d50a14d73bf
Fixed in
  • dc4797c909b6cacb1bb24449e6c57d50a14d73bf
LinuxLinuxAffected
  • ≥ 911049845d7096c27304930ff478cbf3f2623ba3, < 9868f5c077dfe0b606331f2e782484f91a5789a5
Fixed in
  • 9868f5c077dfe0b606331f2e782484f91a5789a5
LinuxLinuxAffected
  • ≥ 911049845d7096c27304930ff478cbf3f2623ba3, < 8325ecf3f16d764a0e0ba42c95b63f08e38710a8
Fixed in
  • 8325ecf3f16d764a0e0ba42c95b63f08e38710a8
LinuxLinuxAffected
  • ≥ 911049845d7096c27304930ff478cbf3f2623ba3, < 2cf03ada03532bfb42f06fbf01d9e2a99e6011d7
Fixed in
  • 2cf03ada03532bfb42f06fbf01d9e2a99e6011d7
LinuxLinuxAffected
  • =4.9
Fixed in–
Linuxlinux/kernelpkg:deb/linux/kernelOther threatsAffected
  • =4.9
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

CVE-2026-98435 is a vulnerability related to the EDAC/altera component, specifically involving the use of the parent device for devres in the altr_portb_setup() function. The affected product is Microsoft software versions 3.0 and 4.0. No CVSS score or detailed impact information is provided, and there is no indication of known exploits in the wild.

References

Community reviews

Loading reviews…