CVE-2026-23071: regmap: Fix race condition in hwspinlock irqsave routine
In the Linux kernel, the following vulnerability has been resolved:
regmap: Fix race condition in hwspinlock irqsave routine
Previously, the address of the shared member '&map->spinlockflags' was passed directly to 'hwspinlocktimeoutirqsave'. This creates a race condition where multiple contexts contending for the lock could overwrite the shared flags variable, potentially corrupting the state for the current lock owner.
Fix this by using a local stack variable 'flags' to store the IRQ state temporarily.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23071?
CVE-2026-23071 is classified as a medium severity vulnerability due to the potential race condition in the hwspinlock irqsave routine.
How do I fix CVE-2026-23071?
To fix CVE-2026-23071, it is recommended to update your Linux kernel to a version that includes the patch for this vulnerability.
Who is affected by CVE-2026-23071?
CVE-2026-23071 affects the Linux kernel, particularly systems that utilize hwspinlocks.
What are the consequences of exploiting CVE-2026-23071?
Exploiting CVE-2026-23071 could potentially lead to unexpected behavior or crashes in systems relying on hwspinlocks.
When was CVE-2026-23071 disclosed?
CVE-2026-23071 was disclosed as part of a series of updates addressing vulnerabilities in the Linux kernel.