CVE-2026-64429: gpio: eic-sprd: use raw_spinlock_t in the irq startup path
gpio: eic-sprd: use rawspinlockt in the irq startup path
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1 - Configuration
In the gpio/eic-sprd code path used by irq_startup(), convert the Spreadtrum EIC controller lock from spinlock_t to raw_spinlock_t (i.e., use raw_spin_lock_irqsave/raw_spin_unlock_irqrestore semantics) so the irq startup path does not use a potentially sleepable lock.
Linux kernel driver: gpio: eic-sprd sprd_eic controller lock type (spinlock_t -> raw_spinlock_t) = raw_spinlock_t
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64429?
CVE-2026-64429 has a medium severity rating of 5.5.
How do I fix CVE-2026-64429?
Upgrading to the latest version of the Linux kernel that addresses CVE-2026-64429 will resolve the vulnerability.
What impact does CVE-2026-64429 have on affected systems?
CVE-2026-64429 can potentially allow denial of service due to improper handling of interrupt requests.
Which software versions are affected by CVE-2026-64429?
CVE-2026-64429 affects the Linux kernel, including Microsoft azl3 kernel version 6.6.144.1-1.
What is the root cause of CVE-2026-64429?
CVE-2026-64429 is caused by the use of a non-optimized spinlock in the IRQ startup path within the GPIO subsystem.