CVE-2026-98721

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state.

Initialize them before registering the handler.

Affected product:

AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , Debian 11 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU

Affected packages:

linux @ 5.10.259 (+4 more)