CVE-2026-92476

In the Linux kernel, the following vulnerability has been resolved: crypto: keembay - Initialize completion before requesting IRQ kmb_ocs_aes_probe() requests the device IRQ before initializing irq_completion. Once the handler is registered it can run immediately, and ocs_aes_irq_handler() unconditionally calls complete(). An interrupt in this window would therefore use an uninitialized completion. Initialize the completion before requesting the IRQ, as the sibling OCS HCU and ECC drivers already do.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-25)

Published

2026-09-17

Modified

2026-10-19

Record from

the NVD, synced 2026-10-19

References

• https://git.kernel.org/stable/c/4ce407055ae9d37f46a3c6f05eb27198b354d287
• https://git.kernel.org/stable/c/5aae80dcec0748b4ed61daace2ad8b12082261f2
• https://git.kernel.org/stable/c/7efb51a5893b22003a679d088b7794be2ccd6c32
• https://git.kernel.org/stable/c/a3ffced8be1555f283680065c3b87a19f5ab9097
• https://git.kernel.org/stable/c/d52a15c4559b69805bc69bf4ad9e16bbf6480d52

Check your stackJSON