CVE-2026-72062
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire bank of 32 pins, if 'mediatek_gpio_irq_type()' is called concurrently for different IRQs on the same bank a possible overwrite of each other's configuration is possible. Thus, protect this state with 'gpio_generic_lock_irqsave' lock in the same way it is handled in irp_chip 'mediatek_gpio_irq_mask()' and 'mediatek_gpio_irq_unmask()' callbacks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72062
EUVD
EUVD-2026-59020

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mediatek linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the GPIO (General Purpose Input/Output) driver for the MediaTek MT7621 SoC. It involves a race condition where shared interrupt trigger states (rising/falling edges) can be corrupted due to non-atomic read-modify-write operations on bank-shared fields. Concurrent calls to mediatek_gpio_irq_type() for different IRQs on the same bank may overwrite each other's configurations.

Detection Guidance

This vulnerability affects the Linux kernel's GPIO handling for MT7621 devices. Detection requires checking kernel logs for gpio-related errors or examining the kernel version for affected releases. Commands like 'dmesg | grep gpio' or 'uname -a' may help identify vulnerable systems.

Impact Analysis

This vulnerability could lead to incorrect interrupt handling for GPIO pins, causing unexpected behavior in hardware interactions. Systems relying on precise GPIO interrupt triggers may experience malfunctions, data corruption, or security issues if malicious actors exploit the race condition.

Mitigation Strategies

Apply the latest kernel patch from your Linux distribution. Update the kernel to a version that includes the fix for CVE-2026-72062. Reboot the system after applying the update to ensure the patched kernel is active.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72062. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart