CVE-2026-72062

gpio: mt7621: avoid corruption of shared interrupt trigger state

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 23, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: mt7621: avoid corruption of shared interrupt trigger state

The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire bank of 32 pins, if 'mediatek_gpio_irq_type()' is called concurrently for different IRQs on the same bank a possible overwrite of each other's configuration is possible. Thus, protect this state with 'gpio_generic_lock_irqsave' lock in the same way it is handled in irp_chip 'mediatek_gpio_irq_mask()' and 'mediatek_gpio_irq_unmask()' callbacks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4ba9c3afda41213ec98c30053e32963892e6dc7c to before bddf9314a57a243dd11ed945ba11e146e331257eAffected
  • 4ba9c3afda41213ec98c30053e32963892e6dc7c to before 207d3ebf36f654a43a934addeb4d6775cb2dd667Affected
  • 4ba9c3afda41213ec98c30053e32963892e6dc7c to before 877a243006788aaa586b2d087f27c9f3628071b0Affected
  • 4ba9c3afda41213ec98c30053e32963892e6dc7c to before d3b9026ef78da3018a7d2c5a9c9d611de6d45c47Affected
  • 4ba9c3afda41213ec98c30053e32963892e6dc7c to before a60a40c9ba30edd06d3fb4215fdf430ed968728eAffected
  • 4ba9c3afda41213ec98c30053e32963892e6dc7c to before 1781172526d1092323af443fa03f00e6de560401Affected
LinuxLinux
  • 4.19Affected
  • before 4.19Not affected
  • 6.1.184 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.