CVE-2026-89964parisc: eisa: Fix infinite loop when parsing invalid IRQ value
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisa_irq_edge=" kernel command line parameter (e.g. "eisa_irq_edge=16,5"), eisa_irq_setup() prints an error message and continues without advancing the current position. As a result the same invalid value is parsed again and again, causing an infinite loop while the kernel boots. Advance to the next comma-separated entry, or stop parsing when there is no next entry, before continuing so that the remaining entries are processed normally.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 68659b627770f3c8d8f578e8ddee78a07d5f1d0e; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8640ade22369e248f77fbdd31a9d71b338499eef; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 21f063e3c2b11fb9078ccdfd3b23634313ce4f0c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 62d88e93ef5e1e04041e347945f7d7510eba1797; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bb10d54b74845eb4547baa1b9e908ecd32aa64e1; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3e2691eeee83a819125dba3f42c74e1b6730d5cd; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 16a62a3f2128b3d86fefc082d8f631becd02bff5; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8b585431a16cfb9d8f2955a9fa0787ce3dceb3c2 | CNA record |
References
- https://git.kernel.org/stable/c/68659b627770f3c8d8f578e8ddee78a07d5f1d0e
- https://git.kernel.org/stable/c/8640ade22369e248f77fbdd31a9d71b338499eef
- https://git.kernel.org/stable/c/21f063e3c2b11fb9078ccdfd3b23634313ce4f0c
- https://git.kernel.org/stable/c/62d88e93ef5e1e04041e347945f7d7510eba1797
- https://git.kernel.org/stable/c/bb10d54b74845eb4547baa1b9e908ecd32aa64e1
- https://git.kernel.org/stable/c/3e2691eeee83a819125dba3f42c74e1b6730d5cd
- https://git.kernel.org/stable/c/16a62a3f2128b3d86fefc082d8f631becd02bff5
- https://git.kernel.org/stable/c/8b585431a16cfb9d8f2955a9fa0787ce3dceb3c2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.