CVE Database›Document archive›CVE-2026-74468

CVE-2026-74468

kernel: gpio: pch: use raw_spinlock_t for the register lock

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 15, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's GPIO PCH driver. On systems configured with PREEMPT_RT, a local attacker could trigger a specific interrupt handler (pch_irq_type()) in a non-sleepable context. This improper use of a spinlock, which attempts to acquire a sleeping lock in an atomic context, can lead to a kernel panic and system instability.

Statement

Red Hat has rated this vulnerability as having a Moderate severity because exploitation requires local access and can result only in a denial of service through a system crash, without compromising confidentiality or integrity. The issue specifically targets the Platform Controller Hub GPIO driver on real-time configurations, requiring specific hardware to trigger. Furthermore, default Red Hat Enterprise Linux kernels do not enable or ship this driver, which significantly limits potential exposure.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-413 · Improper Resource Locking