Riskcovery

CVE-2026-53326

debugobjects: Don't call fill_pool() in early boot hardirq context

State
Published
Severity
Not scored
Published
Jul 1, 2026
Updated
Jul 4, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

debugobjects: Don't call fill_pool() in early boot hardirq context

When booting a debug PREEMPT_RT kernel on an ARM64 system, a "inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage" lockdep warning message was reported to the console.

During early boot, interrupts are enabled before the scheduler is enabled. In this window (before SYSTEM_SCHEDULING is set) interrupts can fire and in the hard interrupt context handler attempt to fill the pool

This can lead to a deadlock when the interrupt occurred when the interrupt hits a region which holds a lock that is required to be taken in the allocation path.

Add a new can_fill_pool() helper and reorder the exception rule and forbid this scenario by excluding allocations from hard interrupt context.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 13abb2b11ac3b6cb89822f152e770081893e4bc3 to before 3cc90ea0dd0fb1f8db577dcdc027fc46c06049f6Affected
  • 0d2a64411b0974a469ff56e62441055147e5a194 to before 5d95f6b267f3d7fe54f42a3b224bb4a3d3990b41Affected
  • c93859a52b0d6953cdaa17fd7fb46a6871b015cf to before 27335c50014102e9077b784ebd314954286afcabAffected
  • a460935022f512e167b4c5d4c12d85f89ba6aabd to before 44b8b03a9fb5c575548fc72c674653d6baba142aAffected
  • 06e0ae988f6e3499785c407429953ade19c1096b to before 7bc71bdb1c1526c7f02a6adab324394ff1327b0aAffected
  • 06e0ae988f6e3499785c407429953ade19c1096b to before 0d046ae106255cba5eb83b23f78ee93f3620247dAffected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.