CVE-2026-99189
Description
A flaw was found in the Linux kernel's General-Purpose Input/Output (GPIO) MXC driver. This vulnerability can result in a Denial of Service (DoS) through a system crash if an interrupt arrives while the device is initializing. Because the interrupt handler is registered before its required data structures are fully set up, or if subsequent initialization steps fail, the system may access uninitialized or freed memory.
Statement
This vulnerability is rated as Moderate severity because it requires local access on specialized hardware platforms and is limited to causing a denial of service through a system crash, without allowing arbitrary code execution or data exposure. Typical Red Hat Enterprise Linux server and cloud deployments run on architectures that do not include NXP i.MX hardware, rendering standard environments unexposed to this driver flaw. On systems where the MXC GPIO controller is present, triggering the flaw requires an interrupt to coincide precisely with driver probe initialization or an initialization error, making accidental or reliable local exploitation difficult.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.1 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | High | N/A | N/A |
| Privileges Required | High | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
