CVE-2026-43087

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A chip being probed may have the interrupt-on-change feature enabled on some of its pins, for example after a reboot. This can cause the chip to generate interrupts for pins that do not have a registered nested handler, leading to a kernel crash. This occurs because the real value of the MCP GPINTEN register is read from the chip, and a non-zero value can trigger the invocation of a nested handler that may not yet exist. The issue manifests in the mcp23s08 irq() function.

Recommendations Disable all pin interrupts during initialization.