CVE-2026-64429

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Spreadtrum EIC controller where the sprd eic irq unmask() function enables the GPIO IRQ and updates the controller state via the sprd eic update() function. The sprd eic update() function acquires sprd eic->lock using spin lock irqsave(). Because this callback can be triggered from irq startup() during IRQ setup, it operates in a non-sleepable path. However, when using PREEMPT RT, a standard spinlock t is converted into a sleeping lock, leading to a situation where a sleeping function is called from an invalid context.

Recommendations Convert the Spreadtrum EIC controller lock to raw spinlock t to ensure the locked section remains non-sleeping during MMIO register updates.