SB20261022466 - Race condition in Linux kernel rtc driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261022466

SB20261022466 - Race condition in Linux kernel rtc driver

Published: October 22, 2026

Security Bulletin ID SB20261022466
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Race condition (CVE-ID: CVE-2026-98847)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to potentially cause a denial of service through a kernel crash.

The vulnerability exists due to a race condition in the Linux kernel SPEAr RTC driver when enabling the alarm interrupt before initializing the MMIO address and spinlock. A local user can potentially exploit an interrupt occurring during device initialization to cause the interrupt handler to access uninitialized state and crash the kernel.


Remediation

Install update from vendor's website.

References