Vulnerability in Linux

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state. Initialize them before registering the handler.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund18 Oct 2026WID-SEC-2026-4019

  Linux Kernel: Multiple vulnerabilities Translated from German

  CVE-2026-98866CVE-2026-98624CVE-2026-98745+326 more CVEs

[ References ]References

• git.kernel.org/stable/c/1ed0ccd5649154bfc00ab11c59262d4f42515252
• git.kernel.org/stable/c/21f027016b1290d13c30b198ae7a00e6b3d1d5a5
• git.kernel.org/stable/c/24319f25b641e55f84e55455092a39a2485c78d4
• git.kernel.org/stable/c/bbd87eca5407288f2b63ff9357c611cd57e7e640
• git.kernel.org/stable/c/c69d8aceda362c95bbc4e2182f5829275a7db0c8