In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence… (CVE-2026-98721)

The Linux kernel's mtd: rawnand: cadence driver had a vulnerability where the IRQ lock and completion object were not initialized before registering the IRQ handler. This created a window during which a pending interrupt could access uninitialized synchronization primitives, potentially leading to undefined behavior. The fix involved initializing these synchronization states prior to registering the IRQ handler, eliminating the race condition.

The vulnerability could allow a pending interrupt to interact with uninitialized synchronization state, which may cause kernel instability or unpredictable behavior. No specific exploitation details or active exploits are reported.

The vulnerability has been resolved by initializing the IRQ lock and completion object before registering the IRQ handler. Users should apply the official Linux kernel update that includes this fix. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel release notes for the exact fixed versions and update accordingly.