{"id":"CVE-2026-23071","title":"regmap: Fix race condition in hwspinlock irqsave routine","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nregmap: Fix race condition in hwspinlock irqsave routine\n\nPreviously, the address of the shared member '&map->spinlock_flags' was\npassed directly to 'hwspin_lock_timeou…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < e1a7072bc4f958c9e852dc7e57e39f12b0bb44b5","Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 766e243ae8c8b27087a4cc605752c0d5ee2daeab","Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < f1e2fe26a51eca95b41420af76d22c2e613efd5e","Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 24f31be6ad70537fd7706269d99c92cade465a09","Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 4aab0ca0a0f7760e33edcb4e47576064d05128f5","Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < c2d2cf710dc3ee1a69e00b4ed8de607a92a07889","Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 4b58aac989c1e3fafb1c68a733811859df388250","Linux 4.15"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-06-10T20:40:57.245934Z"},"published":"2026-02-04","updated":"2026-10-19","sourceUpdated":"2026-10-19T18:25:29.039Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23071","references":[{"url":"https://git.kernel.org/stable/c/e1a7072bc4f958c9e852dc7e57e39f12b0bb44b5"},{"url":"https://git.kernel.org/stable/c/766e243ae8c8b27087a4cc605752c0d5ee2daeab"},{"url":"https://git.kernel.org/stable/c/f1e2fe26a51eca95b41420af76d22c2e613efd5e"},{"url":"https://git.kernel.org/stable/c/24f31be6ad70537fd7706269d99c92cade465a09"},{"url":"https://git.kernel.org/stable/c/4aab0ca0a0f7760e33edcb4e47576064d05128f5"},{"url":"https://git.kernel.org/stable/c/c2d2cf710dc3ee1a69e00b4ed8de607a92a07889"},{"url":"https://git.kernel.org/stable/c/4b58aac989c1e3fafb1c68a733811859df388250"}],"tags":["cve.org"],"epss":0.00114,"epssPercentile":0.01409,"ingestedAt":"2026-10-19T18:35:50.109Z","slug":"CVE-2026-23071","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nregmap: Fix race condition in hwspinlock irqsave routine\n\nPreviously, the address of the shared member '&map->spinlock_flags' was\npassed directly to 'hwspin_lock_timeout_irqsave'. This creates a race\ncondition where multiple contexts contending for the lock could overwrite\nthe shared flags variable, potentially corrupting the state for the\ncurrent lock owner.\n\nFix this by using a local stack variable 'flags' to store the IRQ state\ntemporarily.\n\n## Affected\n\n- `Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < e1a7072bc4f958c9e852dc7e57e39f12b0bb44b5`\n- `Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 766e243ae8c8b27087a4cc605752c0d5ee2daeab`\n- `Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < f1e2fe26a51eca95b41420af76d22c2e613efd5e`\n- `Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 24f31be6ad70537fd7706269d99c92cade465a09`\n- `Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 4aab0ca0a0f7760e33edcb4e47576064d05128f5`\n- `Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < c2d2cf710dc3ee1a69e00b4ed8de607a92a07889`\n- `Linux >= 8698b9364710e7bac84b3af07dd410e39c8c2e08 < 4b58aac989c1e3fafb1c68a733811859df388250`\n- `Linux 4.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}