CVE-2026-23470
Analyzed Analyzed - Analysis Complete
Deadlock Vulnerability in Linux drm/imagination Soft Reset Sequence

Publication date: 2026-04-03

Last updated on: 2026-05-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix deadlock in soft reset sequence The soft reset sequence is currently executed from the threaded IRQ handler, hence it cannot call disable_irq() which internally waits for IRQ handlers, i.e. itself, to complete. Use disable_irq_nosync() during a soft reset instead.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-03
Last Modified
2026-05-26
Generated
2026-06-16
AI Q&A
2026-04-03
EPSS Evaluated
2026-06-15
NVD
CVE-2026-23470
EUVD
EUVD-2026-18740
Affected Vendors & Products
Showing 7 associated CPEs
Vendor Product Version / Range
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel From 6.13 (inc) to 6.18.20 (exc)
linux linux_kernel From 6.19 (inc) to 6.19.10 (exc)
linux linux_kernel From 6.8 (inc) to 6.12.78 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-667 The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's drm/imagination component related to the soft reset sequence.

The issue arises because the soft reset sequence is executed from a threaded IRQ handler, which cannot safely call disable_irq() since disable_irq() waits for IRQ handlers, including itself, to complete, causing a deadlock.

The fix involves using disable_irq_nosync() during the soft reset instead of disable_irq(), preventing the deadlock.

Impact Analysis

This vulnerability can cause a deadlock in the Linux kernel's soft reset sequence for the drm/imagination component.

A deadlock in this context could lead to system instability or a hang during the reset process, potentially affecting system reliability and availability.

Mitigation Strategies

The vulnerability involves a deadlock in the Linux kernel's drm/imagination soft reset sequence caused by the use of disable_irq() in a threaded IRQ handler.

To mitigate this vulnerability, update your Linux kernel to a version where this issue is fixed by using disable_irq_nosync() instead of disable_irq() during the soft reset sequence.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23470. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart