What’s Vulnerable › Vulnerabilities

CVE-2026-98847: rtc: spear: initialize IRQ state before requesting alarm IRQ

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-18 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_request_irq() enables the interrupt before it returns, so the handler may run while probe is still initializing the device. Initialize the MMIO address and spinlock before requesting the alarm IRQ.

Affected products

• Linux: 3.0 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/055ef5ce9f67a6a3a1363fa663007f8196cc0fb8
• https://git.kernel.org/stable/c/0d4144e7d6cc5ed266dbef8eb25b602314d3e245
• https://git.kernel.org/stable/c/709edb317ec4a1429dfa1bf41577aa03d7b147c1
• https://git.kernel.org/stable/c/aeda50d645bbb55241be840602e338b3a16c24ca
• https://git.kernel.org/stable/c/c02aa67ea34a826c2cb1aa65d77cf32fafb7eec3
• https://git.kernel.org/stable/c/ca8b230188f6a5ad8d47c751d1213b2062679c9d
• https://git.kernel.org/stable/c/cb6d6a7fbff0414b9eed505d17687b4b7e38fee8
• https://git.kernel.org/stable/c/e0cabda9b6f4dd276c55c40bdbb251e8507ae60e

Get alerted when CVE-2026-98847 or the next vulnerability affects your stack