CVE-2026-80562

A flaw was found in the Linux kernel's gpio: ml-ioh component. An incorrect spinlock type (spinlock_t) was used in interrupt handling routines where a non-sleeping lock (raw_spinlock_t) was required. This could lead to invalid lock acquisition, potentially causing system instability or a denial of service, especially in real-time kernel configurations.

A MODERATE severity flaw was found in the Linux kernel's gpio-ml-ioh GPIO driver. The driver's interrupt controller callbacks (ioh_irq_type(), ioh_irq_enable(), and ioh_irq_disable()) acquire a regular spinlock_t while being invoked with the IRQ descriptor lock (a raw_spinlock_t) held and hard interrupts disabled, a context that is not allowed to sleep. On kernels built with PREEMPT_RT, a regular spinlock_t is an rtmutex-backed sleeping lock, so acquiring it in this context is invalid, which can lead to kernel instability or a local denial of service, affecting availability only. Red Hat assessed the impact as MODERATE (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The vulnerable gpio-ml-ioh driver code is not present in the kernels shipped in any Red Hat Enterprise Linux or Red Hat In-Vehicle OS product stream; all Red Hat products are therefore marked NOT AFFECTED for this flaw, and no Red Hat update is required.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.