SATA Interrupt Handling Vulnerability in Linux Kernel

CVE-2026-68395

What is CVE-2026-68395?

In the Linux kernel, a vulnerability was identified in the SATA DWC 460ex driver, where SATA interrupts are enabled before the IRQ handler is properly registered. This flaw can lead to unhandled interrupts firing during system probe, potentially causing an interrupt storm if the controller asserts an interrupt. The issue stems from the function sata_dwc_enable_interrupts() being called prematurely, which unmask SATA controller interrupts before the system initialization and handler registration are complete. The vulnerability has been addressed by restructuring the function call order to ensure interrupts are only enabled when the handler is fully operational.

References