CVE-2026-98721
Linux: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in24319f25b641e55f84e55455092a39a2485c78d4Also 1ed0ccd5649154bfc00ab11c59262d4f42515252, 21f027016b1290d13c30b198ae7a00e6b3d1d5a5CVE List
What fixes it
- 24319f25b641e55f84e55455092a39a2485c78d4LinuxCVE List
- 1ed0ccd5649154bfc00ab11c59262d4f42515252LinuxCVE List
- 21f027016b1290d13c30b198ae7a00e6b3d1d5a5LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state.
Initialize them before registering the handler.
Text from CVE List
Affected versions 12
- Linuxaffected: ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before c69d8aceda362c95bbc4e2182f5829275a7db0c8CVE List
- Linuxaffected: ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 24319f25b641e55f84e55455092a39a2485c78d4CVE List
- Linuxaffected: ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 1ed0ccd5649154bfc00ab11c59262d4f42515252CVE List
- Linuxaffected: ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before bbd87eca5407288f2b63ff9357c611cd57e7e640CVE List
- Linuxaffected: ec4ba01e894d3165e4d1ccbef782ef5593b708b4 before 21f027016b1290d13c30b198ae7a00e6b3d1d5a5CVE List
- Linuxaffected: 5.5CVE List
- Linuxunaffected: all versions before 5.5CVE List
- Linuxunaffected: 6.6.160 through 6.6.*CVE List
- Linuxunaffected: 6.12.113 through 6.12.*CVE List
- Linuxunaffected: 6.18.56 through 6.18.*CVE List
- Linuxunaffected: 7.2.10 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 5
- git.kernel.org/stable/c/c69d8aceda362c95bbc4e2182f5829275a7db0c8Referencevia CVE List
- git.kernel.org/stable/c/24319f25b641e55f84e55455092a39a2485c78d4Referencevia CVE List
- git.kernel.org/stable/c/1ed0ccd5649154bfc00ab11c59262d4f42515252Referencevia CVE List
- git.kernel.org/stable/c/bbd87eca5407288f2b63ff9357c611cd57e7e640Referencevia CVE List
- git.kernel.org/stable/c/21f027016b1290d13c30b198ae7a00e6b3d1d5a5Referencevia CVE List