CVE-2026-23287 — Time-of-check Time-of-use (TOCTOU) Race Condition in Linux
Severity
7.8HIGH
No vectorEPSS
0.0%
top 90.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
PLIC ignores interrupt completion message for disabled interrupt, explained
by the specification:
The PLIC signals it has completed executing an interrupt handler by
writing the interrupt ID it received from the claim to the
claim/complete register. The PLIC does not check whether the completion
ID is the same as the last claim ID for that target. If the comple…
Affected Packages5 packages
▶CVEListV5linux/linuxcc9f04f9a84f745949e325661550ed14bd0ff322 — 8942fb1a5bc2dcbd88f7e656d109d42f778f298f+6
🔴Vulnerability Details
3OSV▶
CVE-2026-23287: In the Linux kernel, the following vulnerability has been resolved: irqchip/sifive-plic: Fix frozen interrupt due to affinity setting PLIC ignores int↗2026-03-25
GHSA▶
GHSA-73mm-44q3-cmm6: In the Linux kernel, the following vulnerability has been resolved:
irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
PLIC ignores i↗2026-03-25