CVE Database›Document archive›CVE-2026-98878

CVE-2026-98878

kernel: irqchip/gic-v5: Immediately exec priority drop following activate

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 23, 2026

Updated · October 26, 2026

Description

A flaw was found in the Linux kernel's Generic Interrupt Controller version 5 (GICv5) driver. The driver delayed dropping an interrupt's priority until full deactivation rather than immediately after acknowledging it. When an interrupt remains active during a long-running operation or guest virtual machine (VM) execution, the hardware cannot signal new interrupts. This allows a local process or guest VM to block incoming hardware interrupts, resulting in a Denial of Service (DoS) for the system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime