In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initialize completion before requesting IRQ In the report… (CVE-2026-64500)
A vulnerability in the Linux kernel's iio adc lpc32xx driver was resolved by reordering initialization steps. The issue involved registering an interrupt handler before initializing a completion structure, which could lead to a kernel panic if an interrupt occurred early. Specifically, the interrupt handler could call complete() on an uninitialized completion, causing a kernel memory access error. The fix moves the initialization of the completion structure before requesting the IRQ to prevent this race condition.
AI Analysis
Technical Summary
In the Linux kernel driver iio: adc: lpc32xx, the function lpc32xx_adc_probe() registered its interrupt handler via devm_request_irq() before initializing the completion structure with init_completion(). If an interrupt triggered before init_completion() was called, the interrupt handler lpc32xx_adc_isr() would call complete() on an uninitialized completion, leading to a kernel panic due to dereferencing a NULL list entry and causing a KASAN wild-memory-access. The vulnerability is fixed by moving the init_completion() call before devm_request_irq(), ensuring the completion is properly initialized before any interrupt can occur.
Potential Impact
If exploited, this vulnerability can cause a kernel panic due to a wild memory access triggered by the interrupt handler operating on an uninitialized completion structure. This results in a denial of service condition on affected systems running the vulnerable Linux kernel driver. There is no indication of code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix is available that reorders the initialization sequence in the Linux kernel driver source code, moving init_completion() before devm_request_irq(). Users and maintainers should apply the official Linux kernel patches that address this issue. Since this is a kernel-level vulnerability, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should check the official Linux kernel advisories or source repositories for the relevant fix.
In the Linux kernel, the following vulnerability has been resolved: iio: adc: lpc32xx: Initialize completion before requesting IRQ In the report… (CVE-2026-64500)
Description
A vulnerability in the Linux kernel's iio adc lpc32xx driver was resolved by reordering initialization steps. The issue involved registering an interrupt handler before initializing a completion structure, which could lead to a kernel panic if an interrupt occurred early. Specifically, the interrupt handler could call complete() on an uninitialized completion, causing a kernel memory access error. The fix moves the initialization of the completion structure before requesting the IRQ to prevent this race condition.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In the Linux kernel driver iio: adc: lpc32xx, the function lpc32xx_adc_probe() registered its interrupt handler via devm_request_irq() before initializing the completion structure with init_completion(). If an interrupt triggered before init_completion() was called, the interrupt handler lpc32xx_adc_isr() would call complete() on an uninitialized completion, leading to a kernel panic due to dereferencing a NULL list entry and causing a KASAN wild-memory-access. The vulnerability is fixed by moving the init_completion() call before devm_request_irq(), ensuring the completion is properly initialized before any interrupt can occur.
Potential Impact
If exploited, this vulnerability can cause a kernel panic due to a wild memory access triggered by the interrupt handler operating on an uninitialized completion structure. This results in a denial of service condition on affected systems running the vulnerable Linux kernel driver. There is no indication of code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix is available that reorders the initialization sequence in the Linux kernel driver source code, moving init_completion() before devm_request_irq(). Users and maintainers should apply the official Linux kernel patches that address this issue. Since this is a kernel-level vulnerability, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should check the official Linux kernel advisories or source repositories for the relevant fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h726-jm24-wvqc
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64500"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a6542069c2644c7f8081dc9
Added to database: 07/25/2026, 23:08:54 UTC
Last enriched: 07/25/2026, 23:13:43 UTC
Last updated: 07/26/2026, 03:58:23 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.