CVE-2026-98847: rtc: spear: initialize IRQ state before requesting alarm IRQ
In the Linux kernel, the following vulnerability has been resolved:
rtc: spear: initialize IRQ state before requesting alarm IRQ
devmrequestirq() enables the interrupt before it returns, so the handler may run while probe is still initializing the device. Initialize the MMIO address and spinlock before requesting the alarm IRQ.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel rtc-spear driver and its alarm interrupt path are exposed. The provided information does not identify specific kernel versions or hardware platforms.
What condition is required for the issue to occur?
The alarm IRQ must run during device probe after devm_request_irq() has enabled the interrupt but before the driver has initialized its MMIO address and spinlock.
How is the issue fixed?
The fix initializes the MMIO address and spinlock before requesting the alarm IRQ, preventing the interrupt handler from running with uninitialized IRQ state.