CVE-2026-46298: pseries/papr-hvpipe: Fix race with interrupt handler
In the Linux kernel, the following vulnerability has been resolved:
pseries/papr-hvpipe: Fix race with interrupt handler
While executing ->ioctl handler or ->release handler, if an interrupt fires on the same cpu, then we can enter into a deadlock.
This patch fixes both these handlers to take spinlockirq{save|restore} versions of the lock to prevent this deadlock.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the kernel patch “pseries/papr-hvpipe: Fix race with interrupt handler” to modify the affected handlers (the ->ioctl and ->release handlers) so they take spin_lock_irqsave/spin_lock_irqrestore, preventing deadlock if an interrupt fires on the same CPU while those handlers execute.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46298?
CVE-2026-46298 has a risk assessment score of 27, indicating a potentially critical vulnerability.
How do I fix CVE-2026-46298?
To fix CVE-2026-46298, ensure that your Linux kernel is updated to the version containing the patch that addresses this race condition.
What are the potential impacts of CVE-2026-46298?
The potential impact of CVE-2026-46298 includes the risk of deadlock during the execution of IOCTL or release handlers on the CPU.
Which systems are affected by CVE-2026-46298?
CVE-2026-46298 affects systems running the Linux kernel with pseries/papr-hvpipe functionality.
When was CVE-2026-46298 published?
CVE-2026-46298 was published on June 8, 2026.