PT-2026-128182
CVE-2026-99189
·
تاريخ النشر
2026-10-28
·
تاريخ التحديث
2026-10-28
الوصف من
الدرجة
N/A
غير متوفرلا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.
In the Linux kernel, the following vulnerability has been resolved:
gpio: mxc: fix race between chained IRQ handler install and probe completion
mxc update irq chained handler() is called before the IRQ domain, the
generic IRQ chip, and the port list entry are set up. If an interrupt
arrives in that window:
- mx3 gpio irq handler() calls generic handle domain irq() with port->domain still NULL.
- mx2 gpio irq handler() walks mxc gpio ports, but the port has not been added to the list yet.
Additionally, if any of the subsequent probe steps
(gpio generic chip init(), devm gpiochip add data(),
irq domain create legacy(), or mxc gpio init gc()) fail, the error
paths never unregister the chained handler, leaving a dangling handler
that points at freed memory.
Move the handler installation after all its dependencies are ready and
after list add tail(), so the handler is never live while the data
structures it touches are incomplete, and is never installed if probe
fails.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾