{"id":28747,"date":"2026-09-25T04:31:40","date_gmt":"2026-09-24T20:31:40","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-97515"},"modified":"2026-09-25T04:31:40","modified_gmt":"2026-09-24T20:31:40","slug":"cve-2026-97515","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-97515","title":{"rendered":"CVE-2026-97515 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: svc: Pre"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845<\/p>\n<p>On NPCM845, when a target on the I3C bus gets stuck holding SDA low,<br \/>\nthe controller reports a false Master Request (MR) in-band interrupt<br \/>\nevent. The driver handles this by emitting a STOP condition to restore<br \/>\nthe bus.<\/p>\n<p>However, the hardware quirk SVC_I3C_QUIRK_FALSE_SLVSTART indicates that<br \/>\nemitting a STOP condition may spuriously set the SLVSTART interrupt<br \/>\nstatus bit. In the Master Request case, this creates a feedback loop:<br \/>\nthe STOP triggers a new SLVSTART event, the IRQ handler fires again,<br \/>\nthe controller still reports an MR type, another STOP is emitted, and<br \/>\nthe cycle repeats indefinitely, resulting in an IRQ storm that can lock<br \/>\nup the CPU.<\/p>\n<p>Clear the SLVSTART status bit explicitly after emitting the STOP in the<br \/>\nMaster Request IBI handler when the SVC_I3C_QUIRK_FALSE_SLVSTART quirk<br \/>\nis set. This breaks the feedback loop without affecting normal SLVSTART<br \/>\nprocessing, which is already guarded in the top-level IRQ handler by<br \/>\nchecking that MSTATUS is in SLVREQ state.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845<\/p>\n<p>On NPCM845, when a target on the I3C bus gets stuck holding SDA<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28747","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28747","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28747"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28747"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28747"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}