What’s Vulnerable › Vulnerabilities

CVE-2026-46297: net: libwx: use request_irq for VF misc interrupt

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-08 · updated 2026-07-23

Description

In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt Currently, request_threaded_irq() is used with a primary handler but a NULL threaded handler, while also setting the IRQF_ONESHOT flag. This specific combination triggers a WARNING since the commit aef30c8d569c ("genirq: Warn about using IRQF_ONESHOT without a threaded handler"). WARNING: kernel/irq/manage.c:1502 at __setup_irq+0x4fa/0x760 Fix the issue by switching to request_irq(), which is the appropriate interface or a non-threaded interrupt handler, and removing the unnecessary IRQF_ONESHOT flag.

Affected products

• Linux kernel: from 6.17 before 6.18.30; from 6.19 before 7.0.7; 7.1-rc1, 7.1-rc2 — fixed in 6.18.30, 7.0.7

How to fix

Upgrade to a fixed version: Linux kernel 6.18.30, 7.0.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1bca036fe3607182c21f05e2b262167edbef086c
• https://git.kernel.org/stable/c/7a33345153eeeda195c55f15be27074e4c3b5109
• https://git.kernel.org/stable/c/a841574c6e573132681aa57f9b43a0a897a423f6

Get alerted when CVE-2026-46297 or the next vulnerability affects your stack