CVE-2026-98670iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler queues zynq_unmask_work via schedule_delayed_work(); that work is cleared by a devm callback. Register the devm callback before devm_request_irq() so the devres LIFO teardown frees the IRQ first, ensuring the handler can no longer queue work by the time the workqueue is cleared. Otherwise the handler could re-arm the work and run it after the xadc structure has been freed. This issue was found by an in-house static analysis tool.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2a9685d1a3b7644ca08d8355fc238b43faef7c3e before a29d385ad7b340c952a3935af2b33488db1eb3a6; from 2a9685d1a3b7644ca08d8355fc238b43faef7c3e before a5fe2d1b55faba6d00fd87ad491b6cb603046304; from 2a9685d1a3b7644ca08d8355fc238b43faef7c3e before 49ea8a359e362bfbb32a647c8eb7962fbb37234e; 2a9685d1a3b7644ca08d8355fc238b43faef7c3e builds before 0f3f427076240e75ff265e61645627a71ca4918c; e96eb8853f334f96312968e4f01c5a452db54c00; from 5.10.200 before 5.11 | CNA record |
References
- https://git.kernel.org/stable/c/a29d385ad7b340c952a3935af2b33488db1eb3a6
- https://git.kernel.org/stable/c/a5fe2d1b55faba6d00fd87ad491b6cb603046304
- https://git.kernel.org/stable/c/49ea8a359e362bfbb32a647c8eb7962fbb37234e
- https://git.kernel.org/stable/c/0f3f427076240e75ff265e61645627a71ca4918c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.