---
id: "CVE-2026-98721"
kind: "vulnerability"
aliases: ["CVE-2026-98721"]
title: "Linux kernel: Cadence NAND driver reads uninitialized IRQ state on startup"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["embedded", "infrastructure", "linux-kernel", "mtd"]
not_affected_if: ["no-cadence-nand-hardware"]
published_at: "2026-10-18T16:17:25+00:00"
first_seen_at: "2026-10-23T21:57:16+00:00"
updated_at: "2026-10-25T05:17:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98721", "first_seen_at": "2026-10-23T21:57:16+00:00"}]
---

# Linux kernel: Cadence NAND driver reads uninitialized IRQ state on startup

The Cadence NAND flash driver in the Linux kernel registered its interrupt handler before setting up the lock and completion object the handler uses, so an early interrupt could touch uninitialized synchronization state. The fix initializes that state before the handler is registered.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98721

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

The Cadence NAND interrupt handler uses both the IRQ lock and completion
object. Registering the IRQ before initializing them leaves a window in
which a pending interrupt can access uninitialized synchronization state.

Initialize them before registering the handler.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_