CVE-2026-98847
Received
Received - Intake
Linux Kernel RTC Spear IRQ State Initialization Flaw
Vulnerability report for CVE-2026-98847, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-18
Last updated on: 2026-10-18
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
rtc: spear: initialize IRQ state before requesting alarm IRQ
devm_request_irq() enables the interrupt before it returns, so the handler
may run while probe is still initializing the device. Initialize the MMIO
address and spinlock before requesting the alarm IRQ.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 0942a71e435f5198921e8f072540f208f0176542 |
| Linux | Linux | 0942a71e435f5198921e8f072540f208f0176542 |
| Linux | Linux | 0942a71e435f5198921e8f072540f208f0176542 |
| Linux | Linux | 0942a71e435f5198921e8f072540f208f0176542 |
| Linux | Linux | 3.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |