Vulnerability details
CVE-2026-72133
Linux Linux
spi: uniphier: Fix completion initialization order before devm_request_irq()
CVSS 3.1
8.4High
Official description
In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devm_request_irq() The driver calls devm_request_irq() before initializing the completion used by the interrupt handler. Because the interrupt may occur immediately after devm_request_irq(), the handler may execute before init_completion(). This may result in calling complete() on an uninitialized completion, causing undefined behavior. This has been observed with KASAN. Fix this by initializing the completion before registering the IRQ.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.4High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 4.19 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < 82a5746c4c9e94f6f816ec7edea6ddc24417c6a5 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < f4bb0a91f7badd6d15ac8d783a1169d9e1e95c17 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < 49f6705d80b5e6175d8435d9c72b66bd516a8e89 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < b9fcf0db433d79648ace74bc2b8b88f91e306304 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < d44b828eb551bd59ba9f22457825cc3db3a39fc1 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < 077a7bc1c32d3da9670c5e282ea3e5ac8a94be59 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < f3ad1c87d8201e54b66bd6072442f0b5d5a308ee | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 5ba155a4d4cc8e4cdd3db6df7d03271a3bd91177 ≤ v < 8b5798ce0007874c14611b8ee4ce6c749855260e | CVEProject cvelistV5 (CNA) |
References and advisories
8- https://git.kernel.org/stable/c/b9fcf0db433d79648ace74bc2b8b88f91e306304
- https://git.kernel.org/stable/c/82a5746c4c9e94f6f816ec7edea6ddc24417c6a5
- https://git.kernel.org/stable/c/f4bb0a91f7badd6d15ac8d783a1169d9e1e95c17
- https://git.kernel.org/stable/c/49f6705d80b5e6175d8435d9c72b66bd516a8e89
- https://git.kernel.org/stable/c/8b5798ce0007874c14611b8ee4ce6c749855260e
- https://git.kernel.org/stable/c/d44b828eb551bd59ba9f22457825cc3db3a39fc1
- https://git.kernel.org/stable/c/077a7bc1c32d3da9670c5e282ea3e5ac8a94be59
- https://git.kernel.org/stable/c/f3ad1c87d8201e54b66bd6072442f0b5d5a308ee
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-15
- Last updated
- 2026-08-17
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.18%
Probability of exploitation in 30 days
7.8%
Percentile (among all CVEs)
Weaknesses (CWE)
- —