Race condition in Linux kernel - CVE-2026-64587

Vulnerability details

The vulnerability allows a local attacker to cause a denial of service.

The vulnerability exists due to a race condition in arc_emac_intr() and the arc emac driver probe path when handling a stale or latched interrupt during probe teardown after requesting the IRQ. A local attacker can trigger delivery of a stale interrupt to race with release of the associated net_device to cause a denial of service.

The issue arises from leftover interrupt state that may be presented by firmware or the bootloader.

Affected software

How to mitigate CVE-2026-64587

External References

• https://git.kernel.org/stable/c/2503d08f8a2de618e5c3a8183b250ff4a2e2d52c
• https://git.kernel.org/stable/c/5f29dd540fe5ea3c826fc8ec759ba488b31f9707
• https://git.kernel.org/stable/c/6fc7449773748c7b904235a09a67054d78ab1172
• https://git.kernel.org/stable/c/81431da777924dddaefa5c9b0ca9da4a93f9df96
• https://git.kernel.org/stable/c/8efd5dcd31e22a9308b16b107a052fcd568c0a99
• https://git.kernel.org/stable/c/8f9adb3605e36f75639de529bb3d66e94194a388
• https://git.kernel.org/stable/c/abd338da658d7faa8e26cfefc8f83f0066707564
• https://git.kernel.org/stable/c/d0f2386f529807826e7404d40a245ee428f89f62

Related Security Bulletins

• Race condition in Linux kernel ethernet arc driver
• Ubuntu update for linux-raspi