UBUNTU-CVE-2026-98740: Low severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Drop init from ECC setup paths for re-probe safety Sashiko reports: "Does suppressing sysfs unbinding fully prevent the execution of freed init memory? If altrsysmgrregmaplookupbyphandle() returns -EPROBEDEFER, the probe is deferred until after init memory is freed." The a10 EDAC .setup callbacks (sdmmc, ethernet, nand, dma, usb, qspi) and their helpers (altrinita10eccdevicetype, altrinita10eccblock) were marked init. These run from the probe path, which may execute after init memory is freed -- e.g. a probe deferred via -EPROBEDEFER that only succeeds once a late/module dependency appears, or a manual unbind/rebind. Calling init code then dereferences freed memory. Remove init so these functions remain valid at runtime.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove __init from the a10 EDAC setup callbacks (sdmmc, ethernet, nand, dma, usb, qspi) and their helpers altr_init_a10_ecc_device_type and altr_init_a10_ecc_block so they remain valid for deferred probe and manual unbind/rebind.
Linux kernel EDAC/altera A10 EDAC ECC setup paths __init annotations = removed