PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-46297 Linux CVE debrief

A vulnerability in the Linux kernel has been resolved. The issue was caused by using request_threaded_irq() with a primary handler but a NULL threaded handler, while also setting the IRQF_ONESHOT flag. This combination triggered a WARNING since the commit aef30c8d569c (genirq: Warn about using IRQF_ONESHOT without a threaded handler). The fix involves switching to request_irq(), which is the appropriate interface for a non-threaded interrupt handler, and removing the unnecessary IRQF_ONESHOT flag.

Vendor
Linux
Product
Unknown
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-08
Original CVE updated
2026-07-23
Advisory published
2026-06-08
Advisory updated
2026-07-23

Who should care

Linux kernel developers and users who rely on the libwx module for VF misc interrupt handling should be aware of this vulnerability and apply the fix to prevent potential issues.

Technical summary

The Linux kernel vulnerability (CVE-2026-46297) was caused by incorrect usage of request_threaded_irq() with a primary handler but a NULL threaded handler, and setting the IRQF_ONESHOT flag. The fix is to use request_irq() and remove the IRQF_ONESHOT flag.

Defensive priority

Medium

Recommended defensive actions

  • Apply the fix by using request_irq() instead of request_threaded_irq() and removing the IRQF_ONESHOT flag.
  • Refer to the official CVE record at resourceLinkAnnotations.cve-org for more information.
  • Check the NVD detail page at resourceLinkAnnotations.nvd for updates and additional resources.

Evidence notes

The vulnerability was discovered in the Linux kernel and resolved by changing the interrupt handling mechanism.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-46297 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-46297

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-46297 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46297

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/1bca036fe3607182c21f05e2b262167edbef086c

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/7a33345153eeeda195c55f15be27074e4c3b5109

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/a841574c6e573132681aa57f9b43a0a897a423f6

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.