Strix
73.2K

CVE-2026-98721

UnknownEPSS 0.20%

Last modified

CVE-2026-98721 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state. Initialize them before registering the handler.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state. Initialize them before registering the handler.

Metrics

EPSS Probability
0.20%

9.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < 942274f94c1d547fb212de4403e9ee66443a9c86; >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < f636a8c4e1c8c82d2dae3b4af16e9aa9971ef0a2; >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < 4592c3b4de4b65ec5d5265a272f84d5691005c14; >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < c69d8aceda362c95bbc4e2182f5829275a7db0c8; >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < 24319f25b641e55f84e55455092a39a2485c78d4; >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < 1ed0ccd5649154bfc00ab11c59262d4f42515252; >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < bbd87eca5407288f2b63ff9357c611cd57e7e640; >= ec4ba01e894d3165e4d1ccbef782ef5593b708b4, < 21f027016b1290d13c30b198ae7a00e6b3d1d5a5
LinuxLinux5.5

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98721?
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state. Initialize them before registering the handler.
How severe is CVE-2026-98721?
Severity scoring for CVE-2026-98721 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2026-98721?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98721?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST