Not yet scoredPublished Oct 18, 2026

CVE-2026-98847rtc: spear: initialize IRQ state before requesting alarm IRQ

Updated under an hour ago (Oct 28, 2026, 10:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_request_irq() enables the interrupt before it returns, so the handler may run while probe is still initializing the device. Initialize the MMIO address and spinlock before requesting the alarm IRQ.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 18, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0942a71e435f5198921e8f072540f208f0176542 before aeda50d645bbb55241be840602e338b3a16c24ca; from 0942a71e435f5198921e8f072540f208f0176542 before c02aa67ea34a826c2cb1aa65d77cf32fafb7eec3; from 0942a71e435f5198921e8f072540f208f0176542 before e0cabda9b6f4dd276c55c40bdbb251e8507ae60e; from 0942a71e435f5198921e8f072540f208f0176542 before cb6d6a7fbff0414b9eed505d17687b4b7e38fee8; 0942a71e435f5198921e8f072540f208f0176542 builds before 055ef5ce9f67a6a3a1363fa663007f8196cc0fb8	CNA record

References

References

https://git.kernel.org/stable/c/aeda50d645bbb55241be840602e338b3a16c24ca
https://git.kernel.org/stable/c/c02aa67ea34a826c2cb1aa65d77cf32fafb7eec3
https://git.kernel.org/stable/c/e0cabda9b6f4dd276c55c40bdbb251e8507ae60e
https://git.kernel.org/stable/c/cb6d6a7fbff0414b9eed505d17687b4b7e38fee8
https://git.kernel.org/stable/c/055ef5ce9f67a6a3a1363fa663007f8196cc0fb8

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.