CVE-2026-46297: net: libwx: use request_irq for VF misc interrupt
In the Linux kernel, the following vulnerability has been resolved:
net: libwx: use requestirq for VF misc interrupt
Currently, requestthreadedirq() is used with a primary handler but a NULL threaded handler, while also setting the IRQFONESHOT flag. This specific combination triggers a WARNING since the commit aef30c8d569c ("genirq: Warn about using IRQFONESHOT without a threaded handler").
WARNING: kernel/irq/manage.c:1502 at setupirq+0x4fa/0x760
Fix the issue by switching to requestirq(), which is the appropriate interface or a non-threaded interrupt handler, and removing the unnecessary IRQFONESHOT flag.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (net: libwx)to a version that resolves this vulnerability.Patch aef30c8d569c - Configuration
Switch from request_threaded_irq() with a NULL/primary-threaded handler configuration to request_irq() (non-threaded handler as appropriate), and remove the unnecessary IRQF_ONESHOT flag to prevent the __setup_irq warning (WARNING in kernel/irq/manage.c:1502).
Linux kernel (net: libwx VF misc interrupt) interrupt request API and flags (IRQF_ONESHOT) = Use request_irq() instead of request_threaded_irq(); do not set IRQF_ONESHOT
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46297?
CVE-2026-46297 has a severity rating of 12.
How do I fix CVE-2026-46297?
To fix CVE-2026-46297, ensure that the appropriate IRQ handling functions are implemented in the Linux kernel.
What systems are affected by CVE-2026-46297?
CVE-2026-46297 affects systems running the Linux kernel that utilize VF misc interrupts.
Are there any known exploits for CVE-2026-46297?
As of now, there are no publicly known exploits for CVE-2026-46297.
What is the nature of CVE-2026-46297 vulnerability?
CVE-2026-46297 is a vulnerability related to incorrect use of interrupt request handling in the Linux kernel.