Riskcovery

CVE-2026-98670

iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

The ZYNQ XADC alarm IRQ handler queues zynq_unmask_work via schedule_delayed_work(); that work is cleared by a devm callback. Register the devm callback before devm_request_irq() so the devres LIFO teardown frees the IRQ first, ensuring the handler can no longer queue work by the time the workqueue is cleared. Otherwise the handler could re-arm the work and run it after the xadc structure has been freed.

This issue was found by an in-house static analysis tool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2a9685d1a3b7644ca08d8355fc238b43faef7c3e to before 7958959ab2a906c04f783a3ffb979c45472ad647Affected
  • 2a9685d1a3b7644ca08d8355fc238b43faef7c3e to before 012451d72c12293918617ff98cc737bedad21910Affected
  • 2a9685d1a3b7644ca08d8355fc238b43faef7c3e to before a29d385ad7b340c952a3935af2b33488db1eb3a6Affected
  • 2a9685d1a3b7644ca08d8355fc238b43faef7c3e to before a5fe2d1b55faba6d00fd87ad491b6cb603046304Affected
  • 2a9685d1a3b7644ca08d8355fc238b43faef7c3e to before 49ea8a359e362bfbb32a647c8eb7962fbb37234eAffected
  • 2a9685d1a3b7644ca08d8355fc238b43faef7c3e to before 0f3f427076240e75ff265e61645627a71ca4918cAffected
  • e96eb8853f334f96312968e4f01c5a452db54c00Affected
  • 5.10.200 to before 5.11Affected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.