CVE-2026-98721

Source
https://cve.org/CVERecord?id=CVE-2026-98721
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98721.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98721
Downstream
Published
2026-10-18T15:46:56Z
Modified
2026-10-19T02:47:14Z
Summary
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
Details

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state.

Initialize them before registering the handler.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98721.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ec4ba01e894d3165e4d1ccbef782ef5593b708b4
Fixed
24319f25b641e55f84e55455092a39a2485c78d4
Fixed
1ed0ccd5649154bfc00ab11c59262d4f42515252
Fixed
bbd87eca5407288f2b63ff9357c611cd57e7e640
Fixed
21f027016b1290d13c30b198ae7a00e6b3d1d5a5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98721.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98721.json"