CVE-2026-64587
Received Received - Intake

Interrupt Quenching in Linux Kernel ARC EMAC Driver

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arc_emac_open(), so probe should not see interrupt delivery in the usual case. However, hardware may still present stale or latched interrupt status left by firmware or the bootloader. If probe later unwinds after devm_request_irq() has installed the handler, such a stale interrupt can still reach arc_emac_intr() during teardown and race with release of the associated net_device. Avoid that window by putting the device into a known quiescent state before requesting the IRQ: disable all EMAC interrupt sources and clear any pending EMAC interrupt status bits. This keeps the change hardware-focused and minimal, while preventing spurious IRQ delivery from leftover state.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-64587
EUVD
EUVD-2026-53774

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the arc_emac network driver. During system probe, stale interrupts from firmware or bootloader may trigger the driver's interrupt handler after the network device is released, causing potential crashes or instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's arc_emac driver and may not have direct detection commands. Check kernel logs for arc_emac-related errors or spurious interrupts during driver probe or teardown. Use dmesg | grep arc_emac to review relevant messages.

Impact Analysis

If exploited, this could lead to system crashes, denial of service, or unexpected behavior in systems using the affected arc_emac network driver. It primarily affects systems where the driver is loaded during boot.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-64587. If using a custom kernel, apply the patch that disables EMAC interrupts before requesting IRQ and clears pending interrupt status bits.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64587. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart