CVE Explorer

CVE-2026-64428

In the Linux kernel, the following vulnerability has been resolved: gpio: sch: use raw_spinlock_t in the irq startup path sch_irq_unmask() enables the GPIO IRQ and then updates the controller state through sch_irq_mask_unmask(), which takes sch->lock with spin_lock_irqsave(). The callback can be reached from irq_startup() while setting up a requested IRQ. That path is not sleepable, but on PREEMPT_RT a regular spinlock_t becomes a sleeping lock. This issue was found by our static analysis t

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:798bdfec1f7d09c657bfe234cbbf145d14ec12889e6b18c4f9bccf61fca14a63

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpio/gpio-sch.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3b1aa05ec27eeccc889ecaa3f2d9baa9f453e50d","status":"affected","version":"7a81638485c1a62a87b4c391ecc9c651a4a9dc19","versionType":"git"},{"lessThan":"4f03a15cc73c83740fc355ee22b336492d17b4da","status":"affected","version":"7a81638485c1a62a87b4c391ecc9c651a4a9dc19","versionType":"git"},{"lessThan":"7a550256d68bbdfa0903ab1c4595c04a6815493a","status":"affected","version":"7a81638485c1a62a87b4c3…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpio/gpio-sch.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessTha…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/affected/1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/286533cb14a3c8a8bd39ff64ea2fc8e1aa0f638b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/3b1aa05ec27eeccc889ecaa3f2d9baa9f453e50d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/41cad91a09d69e8fff4e936db29b1054b4e9f9f7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/4508366ab7dd0c2917a51a9c2e23cc1b9d35157a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/4f03a15cc73c83740fc355ee22b336492d17b4da"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/7a550256d68bbdfa0903ab1c4595c04a6815493a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/a235cec779bb39ec8f961a935b28a2ce278c6c64"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b2fa967955a6049e1cdfa1d6c1ad550f62fbba07aab0d11be4e31cc7a0349609 · sha256:5accc9376b469add… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer