CVE-2026-98721: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-18 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state. Initialize them before registering the handler.

Affected products

Linux: 5.5 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/1ed0ccd5649154bfc00ab11c59262d4f42515252
https://git.kernel.org/stable/c/21f027016b1290d13c30b198ae7a00e6b3d1d5a5
https://git.kernel.org/stable/c/24319f25b641e55f84e55455092a39a2485c78d4
https://git.kernel.org/stable/c/4592c3b4de4b65ec5d5265a272f84d5691005c14
https://git.kernel.org/stable/c/942274f94c1d547fb212de4403e9ee66443a9c86
https://git.kernel.org/stable/c/bbd87eca5407288f2b63ff9357c611cd57e7e640
https://git.kernel.org/stable/c/c69d8aceda362c95bbc4e2182f5829275a7db0c8
https://git.kernel.org/stable/c/f636a8c4e1c8c82d2dae3b4af16e9aa9971ef0a2

Get alerted when CVE-2026-98721 or the next vulnerability affects your stack