PT-2026-27673 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23308

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.59+

Description The Linux kernel contains an issue within the pinctrl subsystem, specifically related to the equilibrium driver. The callback functions eqbr irq mask() and eqbr irq ack() are unnecessarily called within the eqbr irq mask ack() function. This results in the gpiochip disable irq() function being invoked, generating warning traces in the system log during GPIO initialization. This occurs because the interrupt is not disabled in the drivers/pinctrl/starfive/pinctrl-starfive-jh7100.c driver.

Recommendations Update to Linux kernel version 6.12.59+ or later. Do not call the eqbr irq mask() and eqbr irq ack() functions. Implement the necessary functionality directly without disabling interrupts.

Exploit

Fix

Related Identifiers

CVE-2026-23308

Affected Products

Linux Kernel

Starfive Jh7100

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23308.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23308 · Vendor Advisory
• https://git.kernel.org/stable/c/af3b0ec98dc1133521b612f8009fdd36b612aabe · Patch
• https://osv.dev/vulnerability/CVE-2026-23308 · Vendor Advisory
• https://git.kernel.org/stable/c/ec54546e8d8a50a9824c139a127a8459d1b0b1bb · Patch
• https://git.kernel.org/stable/c/3e00b1b332e54ba50cca6691f628b9c06574024f · Patch
• https://git.kernel.org/stable/c/896449ad9053a42c6c710aeae6175170176cabd0 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23308 · Security Note
• https://git.kernel.org/stable/c/53eba152810ef0fff8567b13ea0f62d48e62df6b · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23308 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23308 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23308 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23308 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23308 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23308 · Security Note