CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
In the Linux kernel, the following vulnerability has been resolved:
ata: satadwc460ex: enable SATA interrupts only after IRQ handler is registered
satadwcenableinterrupts() is called before platformgetirq() and atahostactivate(), leaving the SATA controller's interrupt mask enabled without a registered handler. If a later step fails (irq request, phy init, etc.) or if the controller asserts an interrupt during probe, the irq line may fire with no handler, causing a spurious interrupt storm.
Move satadwcenableinterrupts() after atahostactivate() so that interrupts are only unmasked once the handler is registered and the core is fully initialized.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68395?
CVE-2026-68395 has a risk score of 23, indicating a significant vulnerability in the Linux kernel.
What does CVE-2026-68395 affect?
CVE-2026-68395 affects the SATA controller within the Linux kernel, specifically relating to interrupt handling.
How do I fix CVE-2026-68395?
To fix CVE-2026-68395, ensure that the SATA interrupts are enabled only after the IRQ handler is registered in the affected Linux kernel version.
What can happen if CVE-2026-68395 is exploited?
If exploited, CVE-2026-68395 may lead to improper handling of SATA interrupts, potentially causing system instability or crashes.
When was CVE-2026-68395 published?
CVE-2026-68395 was published on August 10, 2026.