CVE-2026-68395
Received Received - Intake

Linux Kernel SATA Interrupt Handling Flaw

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered sata_dwc_enable_interrupts() is called before platform_get_irq() and ata_host_activate(), leaving the SATA controller's interrupt mask enabled without a registered handler. If a later step fails (irq request, phy init, etc.) or if the controller asserts an interrupt during probe, the irq line may fire with no handler, causing a spurious interrupt storm. Move sata_dwc_enable_interrupts() after ata_host_activate() so that interrupts are only unmasked once the handler is registered and the core is fully initialized.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68395
EUVD
EUVD-2026-55581

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the SATA controller driver (sata_dwc_460ex). The issue occurs because SATA interrupts are enabled before the interrupt handler is registered, leaving the controller's interrupt mask active without a handler. If an interrupt fires during this window, it causes a spurious interrupt storm.

Detection Guidance

This vulnerability is specific to the Linux kernel's sata_dwc_460ex driver and may cause spurious interrupt storms. Detection requires checking kernel logs for interrupt-related errors or storms during SATA controller initialization. Use commands like dmesg | grep -i interrupt or journalctl -k | grep -i sata_dwc to inspect for unusual interrupt activity.

Impact Analysis

This could lead to system instability or crashes if spurious interrupts occur during system boot or driver initialization. It may also cause performance degradation due to interrupt storms.

Mitigation Strategies

Apply the latest Linux kernel updates that include the fix for this vulnerability. The issue is resolved by moving sata_dwc_enable_interrupts() after ata_host_activate() in the driver code. Monitor kernel logs for confirmation after updating.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68395. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart