CVE-2026-98670
- Source
- https://cve.org/CVERecord?id=CVE-2026-98670
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98670.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-98670
- Downstream
- Published
- 2026-10-18T15:45:14Z
- Modified
- 2026-10-19T02:46:01Z
- Summary
- iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
The ZYNQ XADC alarm IRQ handler queues zynq_unmask_work via schedule_delayed_work(); that work is cleared by a devm callback. Register the devm callback before devm_request_irq() so the devres LIFO teardown frees the IRQ first, ensuring the handler can no longer queue work by the time the workqueue is cleared. Otherwise the handler could re-arm the work and run it after the xadc structure has been freed.
This issue was found by an in-house static analysis tool.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98670.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0f3f427076240e75ff265e61645627a71ca4918c
- https://git.kernel.org/stable/c/49ea8a359e362bfbb32a647c8eb7962fbb37234e
- https://git.kernel.org/stable/c/a29d385ad7b340c952a3935af2b33488db1eb3a6
- https://git.kernel.org/stable/c/a5fe2d1b55faba6d00fd87ad491b6cb603046304
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98670.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-98670
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced2a9685d1a3b7644ca08d8355fc238b43faef7c3eFixeda29d385ad7b340c952a3935af2b33488db1eb3a6Fixeda5fe2d1b55faba6d00fd87ad491b6cb603046304Fixed49ea8a359e362bfbb32a647c8eb7962fbb37234eFixed0f3f427076240e75ff265e61645627a71ca4918c
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5.10.200Fixed5.11
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducede96eb8853f334f96312968e4f01c5a452db54c00
Affected versions
v5.*
v5.10.200
v5.10.201
v5.10.202
v5.10.203
v5.10.204
v5.10.205
v5.10.206
v5.10.207
v5.10.208
v5.10.209
v5.10.210
v5.10.211
v5.10.212
v5.10.213
v5.10.214
v5.10.215
v5.10.216
v5.10.217
v5.10.218
v5.10.219
v5.10.220
v5.10.221
v5.10.222
v5.10.223
v5.10.224
v5.10.225
v5.10.226
v5.10.227
v5.10.228
v5.10.229
v5.10.230
v5.10.231
v5.10.232
v5.10.233
v5.10.234
v5.10.235
v5.10.236
v5.10.237
v5.10.238
v5.10.239
v5.10.240
v5.10.241
v5.10.242
v5.10.243
v5.10.244
v5.10.245
v5.10.246
v5.10.247
v5.10.248
v5.10.249
v5.10.250
v5.10.251
v5.10.252
v5.10.253
v5.10.254
v5.10.255
v5.10.256
v5.10.257
v5.10.258
v5.10.259
v5.10.260
v5.10.261
v5.10.262
v5.10.263
v5.10.264
v5.10.265
v5.10.266
v5.10.267
v5.10.268
v5.10.269
v5.10.270
v5.10.271
v5.10.272