CVE-2026-99189

A flaw was found in the Linux kernel's General-Purpose Input/Output (GPIO) MXC driver. This vulnerability can result in a Denial of Service (DoS) through a system crash if an interrupt arrives while the device is initializing. Because the interrupt handler is registered before its required data structures are fully set up, or if subsequent initialization steps fail, the system may access uninitialized or freed memory.

This vulnerability is rated as Moderate severity because it requires local access on specialized hardware platforms and is limited to causing a denial of service through a system crash, without allowing arbitrary code execution or data exposure. Typical Red Hat Enterprise Linux server and cloud deployments run on architectures that do not include NXP i.MX hardware, rendering standard environments unexposed to this driver flaw. On systems where the MXC GPIO controller is present, triggering the flaw requires an interrupt to coincide precisely with driver probe initialization or an initialization error, making accidental or reliable local exploitation difficult.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.