CVE-2026-23071

A race condition vulnerability was found in the Linux kernel's regmap subsystem when using hardware spinlocks with IRQ save. The shared spinlock_flags member address was passed directly to hwspin_lock_timeout_irqsave(), allowing multiple contexts contending for the lock to overwrite the shared flags variable. This could corrupt the IRQ state for the current lock owner, leading to improper interrupt handling.

This race condition affects embedded systems using regmap with hardware spinlocks, primarily ARM-based SoCs with shared register access. Exploitation requires concurrent access from multiple contexts and specific timing. The corrupted IRQ state could cause interrupt handling issues, but practical exploitation for code execution is unlikely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.