Live › vulnerability › CVE-2026-98721
Go to dashboardThe Cadence NAND flash driver in the Linux kernel registered its interrupt handler before setting up the lock and completion object the handler uses, so an early interrupt could touch uninitialized synchronization state. The fix initializes that state before the handler is registered.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the Cadence raw NAND driver (mtd: rawnand: cadence) present, typically embedded boards with Cadence NAND controllers. The sources do not name affected kernel versions. Systems without Cadence NAND hardware can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ
The Cadence NAND interrupt handler uses both the IRQ lock and completion object. Registering the IRQ before initializing them leaves a window in which a pending interrupt can access uninitialized synchronization state.
Initialize them before registering the handler.
This page as .md · .json · in your agent: get_signal("CVE-2026-98721")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.