SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72062

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's GPIO subsystem, specifically the Mediatek MT7621 platform, where non-atomic read-modify-write operations can lead to concurrent modifications of shared interrupt trigger states. This could result in configuration overwrites when multiple IRQs are handled simultaneously, potentially causing erratic behavior in GPIO pin management. Organizations utilizing Linux on Mediatek MT7621 devices should prioritize addressing this issue to ensure system stability and prevent possible exploitation.

CVE
CVE-2026-72062
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire bank of 32 pins, if 'mediatek_gpio_irq_type()' is called concurrently for different IRQs on the same bank a possible overwrite of each other's configuration is possible. Thus, protect this state with 'gpio_generic_lock_irqsave' lock in the same way it is handled in irp_chip 'mediatek_gpio_irq_mask()' and 'mediatek_gpio_irq_unmask()' callbacks.