CVE-2026-74733

gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock

State: Published
Severity: 7.8 High
Published: Aug 22, 2026
Updated: Oct 30, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock

Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions (read or write) must hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do this, and it was therefore possible that multiple threads could cause an incorrect register to be read/written.

A previous patch partly fixed this, but only protected the write to the interrupt mask register, and not the read from the direction register.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	58a5c93bd1a6e949267400080f07e57ffe05ec34 to before 58ed56c093a857c19f04cf3db1f02d2e793aec88Affected e2ecdddca80dd845df42376e4b0197fe97018ba2 to before 5d05c4252c09ce10624be2197853c80bf87424e4Affected bfc6444b57dc7186b6acc964705d7516cbaf3904 to before 41255e64eb9dd87b0b8675f4e47a9c67bcef6e39Affected bfc6444b57dc7186b6acc964705d7516cbaf3904 to before bf3f37c2d40b51deb79aea910f28999d7c8c6b5aAffected bfc6444b57dc7186b6acc964705d7516cbaf3904 to before e6a2f5f845f50b0c4299bace5111f56d3390a090Affected bfc6444b57dc7186b6acc964705d7516cbaf3904 to before 9dc325327babe7f159e84cbe9380a45342da0585Affected de7cffa53149c7b48bd1bb29b02390c9f05b7f41Affected 6.1.101 to before 6.1.191Affected 6.6.42 to before 6.6.160Affected 6.9.11 to before 6.10Affected
LinuxLinux	6.10Affected before 6.10Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.1.9 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

58a5c93bd1a6e949267400080f07e57ffe05ec34 to before 58ed56c093a857c19f04cf3db1f02d2e793aec88Affected
e2ecdddca80dd845df42376e4b0197fe97018ba2 to before 5d05c4252c09ce10624be2197853c80bf87424e4Affected
bfc6444b57dc7186b6acc964705d7516cbaf3904 to before 41255e64eb9dd87b0b8675f4e47a9c67bcef6e39Affected
bfc6444b57dc7186b6acc964705d7516cbaf3904 to before bf3f37c2d40b51deb79aea910f28999d7c8c6b5aAffected
bfc6444b57dc7186b6acc964705d7516cbaf3904 to before e6a2f5f845f50b0c4299bace5111f56d3390a090Affected
bfc6444b57dc7186b6acc964705d7516cbaf3904 to before 9dc325327babe7f159e84cbe9380a45342da0585Affected
de7cffa53149c7b48bd1bb29b02390c9f05b7f41Affected
6.1.101 to before 6.1.191Affected
6.6.42 to before 6.6.160Affected
6.9.11 to before 6.10Affected

LinuxLinux

6.10Affected
before 6.10Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.1.9 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.