CVE-2026-98847

medium

Description

In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_request_irq() enables the interrupt before it returns, so the handler may run while probe is still initializing the device. Initialize the MMIO address and spinlock before requesting the alarm IRQ.

References

https://git.kernel.org/stable/c/e0cabda9b6f4dd276c55c40bdbb251e8507ae60e

https://git.kernel.org/stable/c/cb6d6a7fbff0414b9eed505d17687b4b7e38fee8

https://git.kernel.org/stable/c/c02aa67ea34a826c2cb1aa65d77cf32fafb7eec3

https://git.kernel.org/stable/c/055ef5ce9f67a6a3a1363fa663007f8196cc0fb8

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103787

Details

Source: Mitre, NVD

Published: 2026-10-18

Updated: 2026-10-19

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium