CVE-2026-98721mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state. Initialize them before registering the handler.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 24319f25b641e55f84e55455092a39a2485c78d4; from ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 1ed0ccd5649154bfc00ab11c59262d4f42515252; from ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before bbd87eca5407288f2b63ff9357c611cd57e7e640; from ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 21f027016b1290d13c30b198ae7a00e6b3d1d5a5 | CNA record |
References
- https://git.kernel.org/stable/c/24319f25b641e55f84e55455092a39a2485c78d4
- https://git.kernel.org/stable/c/1ed0ccd5649154bfc00ab11c59262d4f42515252
- https://git.kernel.org/stable/c/bbd87eca5407288f2b63ff9357c611cd57e7e640
- https://git.kernel.org/stable/c/21f027016b1290d13c30b198ae7a00e6b3d1d5a5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.