{"id":25533,"date":"2026-09-18T04:31:31","date_gmt":"2026-09-17T20:31:31","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90124"},"modified":"2026-09-18T04:31:31","modified_gmt":"2026-09-17T20:31:31","slug":"cve-2026-90124","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-90124","title":{"rendered":"CVE-2026-90124 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip\/renesas-rzg2l"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>irqchip\/renesas-rzg2l: Fix loss of interrupt<\/p>\n<p>rzg2l_clear_irq_int() and rzg2l_clear_tint_int() perform a<br \/>\nread-modify-write on the ISCR\/TSCR status registers to clear the bit<br \/>\nfor the interrupt just handled. Since these registers are<br \/>\nwrite-0-to-clear per bit, this is racy:<\/p>\n<p>If another interrupt&#8217;s status bit gets set between the read and the write,<br \/>\nthat bit is written back as 0 by the software-constructed value, clearing<br \/>\nan interrupt that hasn&#8217;t been serviced yet and losing it.<\/p>\n<p>This can be reproduced by triggering multiple interrupts at once, e.g.:<\/p>\n<p>  gpioset -c gpiochip0 355=0 353=0 328=0 352=0<\/p>\n<p>Fix this by writing back only the bit being cleared, with all other bits<br \/>\nset to 1, instead of read-modify-writing the whole register.  Since 1-bits<br \/>\nare left unchanged by hardware, concurrently-set status bits for other<br \/>\ninterrupts are preserved.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>irqchip\/renesas-rzg2l: Fix loss of interrupt<\/p>\n<p>rzg2l_clear_irq_int() and rzg2l_clear_tint_int() perform a<br \/>\nread-modify-write on the I<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25533","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25533","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25533"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25533"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}