CVE-2026-98847 in Linux

Summary

by MITRE • 10/18/2026

In the Linux kernel, the following vulnerability has been resolved:

rtc: spear: initialize IRQ state before requesting alarm IRQ

devm_request_irq() enables the interrupt before it returns, so the handler may run while probe is still initializing the device. Initialize the MMIO address and spinlock before requesting the alarm IRQ.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: Linux
• Reservation: 09/25/2026
• Disclosure: 10/18/2026
• Moderation: accepted
• Entry: VDB-421868
• CPE: 20261018
• CWE: CWE-362 (confirmed)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Insurance, Pharma, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-98847
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-98847
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-98847/