PatchTheCVECVE-2026-98094: In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe
26
Routine
MEDIUM 5.5WATCHLISTUPGRADE
CVE-2026-98094 is a medium-severity flaw (CVSS 5.5) affecting linux kernel. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: make dirty_lock IRQ-safe fbtft_mkdirty() can be reached from the fbcon rendering path while processing printk() in hardirq context. Meanwhile, dirty_lock is also taken by fbtft_deferred_io() in workqueue context with local interrupts enabled. Lockdep reports a possible IRQ lock inversion involving dirty_lock and console_owner. A hardirq can interrupt a CPU hold
Why this priority
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 93%) |
| CISA exploited list | No |
| Weakness | CWE-667 |
| Published | 2026-09-25 |
| Last modified | 2026-10-23 |
Publisher (CNA): kernel.org · Vendor: linux
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
linux linux kernel UPGRADE
Affected: >= 4.0 and < 5.10.271 · >= 5.11 and < 5.15.222 · >= 5.16 and < 6.1.189 · >= 6.2 and < 6.6.158 · >= 6.7 and < 6.12.111 · >= 6.13 and < 6.18.53 · >= 6.19 and < 7.2.7 · 7.3 rc1
Fixed in: 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2.7
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Related CVEs
- CVE-2026-98090 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers aft
- CVE-2026-98091 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from t
- CVE-2026-98092 MEDIUM 5.5 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: yc: fix memory leak in acp6x_p
- CVE-2026-63860 HIGH 8.4 UPGRADE In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prefer NLA_NUL_STRING These a
- CVE-2026-98093 HIGH 7.8 UPGRADE In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/dis