---
id: CVE-2026-46298
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  pseries/papr-hvpipe: Fix race with interrupt handler

  While executing ->ioctl handler or ->release handler, if an interrupt
  fires on the same cpu, then we can enter int…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  pseries/papr-hvpipe: Fix race with interrupt handler

  While executing ->ioctl handler or ->release handler, if an interrupt
  fires on the same cpu, then we can enter int…
severity: medium
cvss: 4.7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-362
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.18, < 7.0.7'
  - linux_kernel = 7.1
patched:
  - linux_kernel 7.0.7
published: '2026-06-08'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:33.653'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-46298'
references:
  - url: 'https://git.kernel.org/stable/c/342c966f81cfc3cb6c297e80b37a9f3a5d637d2c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7a4f0846ee6cc8cf44ae0046ed42e3259d1dd45b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b33d6f5da16e0eec95b933342812c689cdfcec03'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00085
epssPercentile: 0.0027
ingestedAt: '2026-07-07T18:42:24.316Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

pseries/papr-hvpipe: Fix race with interrupt handler

While executing ->ioctl handler or ->release handler, if an interrupt
fires on the same cpu, then we can enter into a deadlock.

This patch fixes both these handlers to take spin_lock_irq{save|restore}
versions of the lock to prevent this deadlock.

## Affected

- `linux_kernel >= 6.18, < 7.0.7`
- `linux_kernel = 7.1`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.0.7`