CVE-2026-64429: gpio: eic-sprd: use raw_spinlock_t in the irq startup path
gpio: eic-sprd: use rawspinlockt in the irq startup path
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1 - Configuration
Convert the Spreadtrum EIC controller lock from spinlock_t to raw_spinlock_t, specifically in the irq_startup path used by gpio: eic-sprd (irq_startup() -> sprd_eic_irq_unmask() -> sprd_eic_update()).
Linux kernel module gpio: eic-sprd (Sprd EIC controller) sprd_eic controller lock type = raw_spinlock_t (replace spinlock_t)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64429?
CVE-2026-64429 has a medium severity rating of 5.5.
How do I fix CVE-2026-64429?
Upgrading to the latest version of the Linux kernel that addresses CVE-2026-64429 will resolve the vulnerability.
What impact does CVE-2026-64429 have on affected systems?
CVE-2026-64429 can potentially allow denial of service due to improper handling of interrupt requests.
Which software versions are affected by CVE-2026-64429?
CVE-2026-64429 affects the Linux kernel, including Microsoft azl3 kernel version 6.6.144.1-1.
What is the root cause of CVE-2026-64429?
CVE-2026-64429 is caused by the use of a non-optimized spinlock in the IRQ startup path within the GPIO subsystem.