{"id":"CVE-2026-98721","title":"mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: cadence: Initialize IRQ state before requesting IRQ\n\nThe Cadence NAND interrupt handler uses both the IRQ lock and completion\nobject. Registering the IRQ …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 24319f25b641e55f84e55455092a39a2485c78d4","Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 1ed0ccd5649154bfc00ab11c59262d4f42515252","Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < bbd87eca5407288f2b63ff9357c611cd57e7e640","Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 21f027016b1290d13c30b198ae7a00e6b3d1d5a5","Linux 5.5"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:46:56.857Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98721","references":[{"url":"https://git.kernel.org/stable/c/24319f25b641e55f84e55455092a39a2485c78d4"},{"url":"https://git.kernel.org/stable/c/1ed0ccd5649154bfc00ab11c59262d4f42515252"},{"url":"https://git.kernel.org/stable/c/bbd87eca5407288f2b63ff9357c611cd57e7e640"},{"url":"https://git.kernel.org/stable/c/21f027016b1290d13c30b198ae7a00e6b3d1d5a5"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T16:47:32.509Z","slug":"CVE-2026-98721","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: cadence: Initialize IRQ state before requesting IRQ\n\nThe Cadence NAND interrupt handler uses both the IRQ lock and completion\nobject. Registering the IRQ before initializing them leaves a window in\nwhich a pending interrupt can access uninitialized synchronization state.\n\nInitialize them before registering the handler.\n\n## Affected\n\n- `Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 24319f25b641e55f84e55455092a39a2485c78d4`\n- `Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 1ed0ccd5649154bfc00ab11c59262d4f42515252`\n- `Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < bbd87eca5407288f2b63ff9357c611cd57e7e640`\n- `Linux >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4 < 21f027016b1290d13c30b198ae7a00e6b3d1d5a5`\n- `Linux 5.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}