In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Fix use-after-free in error paths In both… (CVE-2026-98932)

The vulnerability in the Linux kernel EDAC altera driver involved freeing the dci structure before releasing the devres group in error paths of altr_edac_a10_device_add() and altr_portb_setup(). Since IRQ handlers use altdev(dci->pvt_info) as their data, an IRQ firing between freeing dci and unregistering the IRQs could dereference freed memory, causing a use-after-free condition. The fix involved releasing the devres group first to unregister managed IRQs before freeing the dci structure.

This use-after-free vulnerability could lead to kernel memory corruption or crashes if an IRQ fires after the dci structure is freed but before IRQs are unregistered. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to reorder resource release, ensuring IRQs are unregistered before freeing the dci structure. Users should update to the patched kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.