CVE-2026-72062

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72062", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.903Z", "datePublished": "2026-08-15T05:52:16.564Z", "dateUpdated": "2026-08-23T12:46:38.586Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-23T12:46:38.586Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mt7621: avoid corruption of shared interrupt trigger state\n\nThe bank-shared fields like 'rising' and 'falling' are modified using\nnon-atomic read-modify-write operations. Since every gpio chip instance\nrepresents an entire bank of 32 pins, if 'mediatek_gpio_irq_type()' is\ncalled concurrently for different IRQs on the same bank a possible overwrite\nof each other's configuration is possible. Thus, protect this state with\n'gpio_generic_lock_irqsave' lock in the same way it is handled in irp_chip\n'mediatek_gpio_irq_mask()' and 'mediatek_gpio_irq_unmask()' callbacks."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-mt7621.c"], "versions": [{"version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "lessThan": "bddf9314a57a243dd11ed945ba11e146e331257e", "status": "affected", "versionType": "git"}, {"version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "lessThan": "207d3ebf36f654a43a934addeb4d6775cb2dd667", "status": "affected", "versionType": "git"}, {"version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "lessThan": "877a243006788aaa586b2d087f27c9f3628071b0", "status": "affected", "versionType": "git"}, {"version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "lessThan": "d3b9026ef78da3018a7d2c5a9c9d611de6d45c47", "status": "affected", "versionType": "git"}, {"version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "lessThan": "a60a40c9ba30edd06d3fb4215fdf430ed968728e", "status": "affected", "versionType": "git"}, {"version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "lessThan": "1781172526d1092323af443fa03f00e6de560401", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/gpio/gpio-mt7621.c"], "versions": [{"version": "4.19", "status": "affected"}, {"version": "0", "lessThan": "4.19", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.184", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19", "versionEndExcluding": "6.1.184"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/bddf9314a57a243dd11ed945ba11e146e331257e"}, {"url": "https://git.kernel.org/stable/c/207d3ebf36f654a43a934addeb4d6775cb2dd667"}, {"url": "https://git.kernel.org/stable/c/877a243006788aaa586b2d087f27c9f3628071b0"}, {"url": "https://git.kernel.org/stable/c/d3b9026ef78da3018a7d2c5a9c9d611de6d45c47"}, {"url": "https://git.kernel.org/stable/c/a60a40c9ba30edd06d3fb4215fdf430ed968728e"}, {"url": "https://git.kernel.org/stable/c/1781172526d1092323af443fa03f00e6de560401"}], "title": "gpio: mt7621: avoid corruption of shared interrupt trigger state", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-mt7621.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "bddf9314a57a243dd11ed945ba11e146e331257e", "status": "affected", "version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "versionType": "git"}, {"lessThan": "207d3ebf36f654a43a934addeb4d6775cb2dd667", "status": "affected", "version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "versionType": "git"}, {"lessThan": "877a243006788aaa586b2d087f27c9f3628071b0", "status": "affected", "version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "versionType": "git"}, {"lessThan": "d3b9026ef78da3018a7d2c5a9c9d611de6d45c47", "status": "affected", "version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "versionType": "git"}, {"lessThan": "a60a40c9ba30edd06d3fb4215fdf430ed968728e", "status": "affected", "version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "versionType": "git"}, {"lessThan": "1781172526d1092323af443fa03f00e6de560401", "status": "affected", "version": "4ba9c3afda41213ec98c30053e32963892e6dc7c", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/gpio/gpio-mt7621.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.19"}, {"lessThan": "4.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.184", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: mt7621: avoid corruption of shared interrupt trigger state\n\nThe bank-shared fields like 'rising' and 'falling' are modified using\nnon-atomic read-modify-write operations. Since every gpio chip instance\nrepresents an entire bank of 32 pins, if 'mediatek_gpio_irq_type()' is\ncalled concurrently for different IRQs on the same bank a possible overwrite\nof each other's configuration is possible. Thus, protect this state with\n'gpio_generic_lock_irqsave' lock in the same way it is handled in irp_chip\n'mediatek_gpio_irq_mask()' and 'mediatek_gpio_irq_unmask()' callbacks."}], "id": "CVE-2026-72062", "lastModified": "2026-08-23T13:16:38.840", "metrics": {}, "published": "2026-08-15T06:21:15.757", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1781172526d1092323af443fa03f00e6de560401"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/207d3ebf36f654a43a934addeb4d6775cb2dd667"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/877a243006788aaa586b2d087f27c9f3628071b0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a60a40c9ba30edd06d3fb4215fdf430ed968728e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bddf9314a57a243dd11ed945ba11e146e331257e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d3b9026ef78da3018a7d2c5a9c9d611de6d45c47"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: gpio: mt7621: avoid corruption of shared interrupt trigger state", "id": "2516596", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516596"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-366", "details": ["A flaw was found in the Linux kernel's `gpio: mt7621` module. This vulnerability arises from non-atomic operations on shared interrupt trigger state. When `mediatek_gpio_irq_type()` is called concurrently for different interrupts on the same bank, it can lead to an overwrite of configurations. This corruption of the shared interrupt trigger state could result in incorrect interrupt handling and potential system instability or a denial of service."], "name": "CVE-2026-72062", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72062\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72062\nhttps://lore.kernel.org/linux-cve-announce/2026081517-CVE-2026-72062-799f@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4ba9c3afda41213ec98c30053e32963892e6dc7c,207d3ebf36f654a43a934addeb4d6775cb2dd667)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4ba9c3afda41213ec98c30053e32963892e6dc7c,877a243006788aaa586b2d087f27c9f3628071b0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4ba9c3afda41213ec98c30053e32963892e6dc7c,d3b9026ef78da3018a7d2c5a9c9d611de6d45c47)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4ba9c3afda41213ec98c30053e32963892e6dc7c,a60a40c9ba30edd06d3fb4215fdf430ed968728e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4ba9c3afda41213ec98c30053e32963892e6dc7c,1781172526d1092323af443fa03f00e6de560401)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.148,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T12:45:06.748845+00:00", "updated": "2026-08-18T06:00:04.162753+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}