CVE-2026-72062
Description
In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire bank of 32 pins, if 'mediatek_gpio_irq_type()' is called concurrently for different IRQs on the same bank a possible overwrite of each other's configuration is possible. Thus, protect this state with 'gpio_generic_lock_irqsave' lock in the same way it is handled in irp_chip 'mediatek_gpio_irq_mask()' and 'mediatek_gpio_irq_unmask()' callbacks.
How to fix
- Linux Linuxbddf9314a57a243dd11ed945ba11e146e331257e, 207d3ebf36f654a43a934addeb4d6775cb2dd667, 877a243006788aaa586b2d087f27c9f3628071b0, d3b9026ef78da3018a7d2c5a9c9d611de6d45c47, a60a40c9ba30edd06d3fb4215fdf430ed968728e, 1781172526d1092323af443fa03f00e6de560401 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4ba9c3afda41213ec98c30053e32963892e6dc7c ≤ v < bddf9314a57a243dd11ed945ba11e146e331257e, 4ba9c3afda41213ec98c30053e32963892e6dc7c ≤ v < 207d3ebf36f654a43a934addeb4d6775cb2dd667, 4ba9c3afda41213ec98c30053e32963892e6dc7c ≤ v < 877a243006788aaa586b2d087f27c9f3628071b0, 4ba9c3afda41213ec98c30053e32963892e6dc7c ≤ v < d3b9026ef78da3018a7d2c5a9c9d611de6d45c47, 4ba9c3afda41213ec98c30053e32963892e6dc7c ≤ v < a60a40c9ba30edd06d3fb4215fdf430ed968728e, 4ba9c3afda41213ec98c30053e32963892e6dc7c ≤ v < 1781172526d1092323af443fa03f00e6de560401, 4.19 | bddf9314a57a243dd11ed945ba11e146e331257e, 207d3ebf36f654a43a934addeb4d6775cb2dd667, 877a243006788aaa586b2d087f27c9f3628071b0, d3b9026ef78da3018a7d2c5a9c9d611de6d45c47, a60a40c9ba30edd06d3fb4215fdf430ed968728e, 1781172526d1092323af443fa03f00e6de560401 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.