CVE-2026-98721

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98721
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98721.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98721
Downstream
Related
Published
2026-10-18T15:46:56Z
Modified
2026-11-04T14:27:16Z
Summary
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
Details

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state.

Initialize them before registering the handler.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98721.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ec4ba01e894d3165e4d1ccbef782ef5593b708b4
Fixed
942274f94c1d547fb212de4403e9ee66443a9c86
Fixed
f636a8c4e1c8c82d2dae3b4af16e9aa9971ef0a2
Fixed
4592c3b4de4b65ec5d5265a272f84d5691005c14
Fixed
c69d8aceda362c95bbc4e2182f5829275a7db0c8
Fixed
24319f25b641e55f84e55455092a39a2485c78d4
Fixed
1ed0ccd5649154bfc00ab11c59262d4f42515252
Fixed
bbd87eca5407288f2b63ff9357c611cd57e7e640
Fixed
21f027016b1290d13c30b198ae7a00e6b3d1d5a5

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98721.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.56
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98721.json"