Linux Kernel Ethernet Driver Vulnerability Affecting ARC EMAC

CVE-2026-64587

What is CVE-2026-64587?

A vulnerability in the ARC EMAC driver of the Linux kernel relates to improper interrupt handling that may allow stale or latched interrupt statuses, potentially left by firmware or bootloaders, to disrupt normal operations. The driver can receive unexpected interrupts when the device is not properly configured, which could lead to conditions that compromise system stability and reliability. To mitigate this issue, it's crucial to quiesce the device before requesting IRQs, ensuring that all EMAC interrupt sources are disabled and any pending interrupt status bits are cleared. This approach minimizes the risk of spurious IRQ deliveries and enhances the robustness of the driver's interaction with network devices.

References