CVE-2026-68395
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered sata_dwc_enable_interrupts() is called before platform_get_irq() and ata_host_activate(), leaving the SATA controller's interrupt mask enabled without a registered handler. If a later step fails (irq request, phy init, etc.) or if the controller asserts an interrupt during probe, the irq line may fire with no handler, causing a spurious interrupt storm. Move sata_dwc_enable_interrupts() after ata_host_activate() so that interrupts are only unmasked once the handler is registered and the core is fully initialized.
References
- https://git.kernel.org/stable/c/60b922442e9c208832e2699f128ef078f9f50faa
- https://git.kernel.org/stable/c/d031957a6284e03c709f95cb8fc6f8891d4432ba
- https://git.kernel.org/stable/c/8fbad29f399ba11c3b070ef5baf1c4b3e13ed838
- https://git.kernel.org/stable/c/fbe7df5d3a3aed2456667a4825e4ff98d6df6ca4
- https://git.kernel.org/stable/c/23d4c50fdc0dfe3ad4f9647a3b7d486de807dcda
- https://git.kernel.org/stable/c/daa80b422ed920a3c0c45153020b0ad7af7fb5a5
- https://git.kernel.org/stable/c/5d0797d6940b8dc894f950c52f7af0b42cb55ed0
- https://git.kernel.org/stable/c/4bbc16a353a98023e5ddfca7c1fc0e49971cf4d0
European references
- ENISA EUVD · EUVD-2026-55581
- GCVE · GCVE-0-2026-68395
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1372 — Multiples vulnérabilités dans les produits SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1069 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 62936009f35a6659cc3ebe0d90c754182d60da73 < 60b922442e9c208832e2699f128ef078f9f50faa ; affected 62936009f35a6659cc3ebe0d90c754182d60da73 < d031957a6284e03c709f95cb8fc6f8891d4432ba ; affected 62936009f35a6659cc3ebe0d90c754182d60da73 < 8fbad29f399ba11c3b070ef5baf1c4b3e13ed838 ; affected 62936009f35a6659cc3ebe0d90c754182d60da73 < fbe7df5d3a3aed2456667a4825e4ff98d6df6ca4 ; affected 62936009f35a6659cc3ebe0d90c754182d60da73 < 23d4c50fdc0dfe3ad4f9647a3b7d486de807dcda ; affected 62936009f35a6659cc3ebe0d90c754182d60da73 < daa80b422ed920a3c0c45153020b0ad7af7fb5a5 |
| Linux · Linux | affected 2.6.36 ; unaffected 0 < 2.6.36 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.148 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |