Answer in brief
CVE-2026-98855 records a Unknown severity vulnerability in of/overlay: put property on deadprops only after changeset add succeeds. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f96278810150fc39085d1872e5b39ea06366d03e <d5151496a0a2b19c9c0c7b0ebf86b3de55a8fa3a || >=f96278810150fc39085d1872e5b39ea06366d03e <7dc6a769153c0457077a0da4888a00f61e66de15 || >=f96278810150fc39085d1872e5b39ea06366d03e <5857035a3b53a4e7b5a0d5a740189901ece0b079 || >=f96278810150fc39085d1872e5b39ea06366d03e <814f2da6995772c07a7c9c2cc6028b6e3f3ecc9c || b52ca352489be8beb7de3a8181509a0deaf72e21 || >=4.19.49 <4.20 | d5151496a0a2b19c9c0c7b0ebf86b3de55a8fa3a, 7dc6a769153c0457077a0da4888a00f61e66de15, 5857035a3b53a4e7b5a0d5a740189901ece0b079, 814f2da6995772c07a7c9c2cc6028b6e3f3ecc9c, 4.20 |
| Linux/Linuxgeneric | 5.0 | Not reported |
| Linux/Linuxgeneric | >=f96278810150fc39085d1872e5b39ea06366d03e <936f1ffcb87a1c50938a21176a6463af162cf4b5 || >=f96278810150fc39085d1872e5b39ea06366d03e <d5151496a0a2b19c9c0c7b0ebf86b3de55a8fa3a || >=f96278810150fc39085d1872e5b39ea06366d03e <7dc6a769153c0457077a0da4888a00f61e66de15 || >=f96278810150fc39085d1872e5b39ea06366d03e <5857035a3b53a4e7b5a0d5a740189901ece0b079 || >=f96278810150fc39085d1872e5b39ea06366d03e <814f2da6995772c07a7c9c2cc6028b6e3f3ecc9c || b52ca352489be8beb7de3a8181509a0deaf72e21 || >=4.19.49 <4.20 | 936f1ffcb87a1c50938a21176a6463af162cf4b5, d5151496a0a2b19c9c0c7b0ebf86b3de55a8fa3a, 7dc6a769153c0457077a0da4888a00f61e66de15, 5857035a3b53a4e7b5a0d5a740189901ece0b079, 814f2da6995772c07a7c9c2cc6028b6e3f3ecc9c, 4.20 |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new property of a not-yet-live target node into the node's deadprops list before handing it to of_changeset_add_property(). If that fails, the error path frees the property but leaves the freed pointer linked in deadprops, and of_node_release() frees it a second time when the aborted overlay's node is released. Record the changeset entry first and link the property into deadprops only on success. of_changeset_add_property() never looks at the node's property lists, so the order of the two steps is otherwise immaterial, and the error path frees a property that nothing references.
Quoted source text, attributed separately from HOL analysis.