CVE-2026-90258: pinctrl: airoha: add missed IRQ resource helpers
Published Sep 17, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
pinctrl: airoha: add missed IRQ resource helpers
Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking and can allow userspace or another driver to reconfigure an active IRQ pin as an output
Event History
Sep 17, 2026
CVE Published
via MITRE·04:07 PM
Data Sourced
via MITRE·04:07 PM
Description
Frequently Asked Questions
1
Which deployments are exposed to this issue?
Systems using the Airoha pin controller are affected when an IRQ-capable GPIO pin is active. The issue concerns pins managed through gpiolib without the required IRQ resource handling.
2
What is required for the unsafe reconfiguration to occur?
An active IRQ pin must be reconfigured as an output by userspace or by another driver. The missing IRQ resource hook prevents gpiolib from marking the GPIO as used for IRQ, so direction locking does not take effect.