AUGUST 22, 2026
Live Feed
Back to database
Case File

CVE-2026-68395

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's SATA controller implementation, where interrupts are enabled before the IRQ handler is registered. This misconfiguration can lead to spurious interrupt storms if the controller asserts an interrupt during initialization, potentially causing system instability. Linux system administrators and developers working with affected kernel versions should prioritize applying the relevant updates to mitigate this risk.

CVE
CVE-2026-68395
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered sata_dwc_enable_interrupts() is called before platform_get_irq() and ata_host_activate(), leaving the SATA controller's interrupt mask enabled without a registered handler. If a later step fails (irq request, phy init, etc.) or if the controller asserts an interrupt during probe, the irq line may fire with no handler, causing a spurious interrupt storm. Move sata_dwc_enable_interrupts() after ata_host_activate() so that interrupts are only unmasked once the handler is registered and the core is fully initialized.