CVE-2026-64428

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the GPIO SCH controller where the sch irq unmask() function enables the GPIO IRQ and updates the controller state via sch irq mask unmask(). This process utilizes sch->lock with spin lock irqsave(). When the callback is reached from irq startup() during the setup of a requested IRQ, the path is non-sleepable. However, under PREEMPT RT, a standard spinlock t is converted into a sleeping lock, leading to a situation where a sleeping function is called from an invalid context.

Recommendations Convert the SCH controller lock to raw spinlock t to ensure the register lock remains non-sleeping for irqchip callbacks.