CVE-2026-53326

debugobjects: Don't call fill_pool() in early boot hardirq context

published July 1, 2026

CVSS
—
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

debugobjects: Don't call fill_pool() in early boot hardirq context

When booting a debug PREEMPT_RT kernel on an ARM64 system, a "inconsistent

{HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage" lockdep warning message was

reported to the console.

During early boot, interrupts are enabled before the scheduler is

enabled. In this window (before SYSTEM_SCHEDULING is set) interrupts can

fire and in the hard interrupt context handler attempt to fill the pool

This can lead to a deadlock when the interrupt occurred when the interrupt

hits a region which holds a lock that is required to be taken in the

allocation path.

Add a new can_fill_pool() helper and reorder the exception rule and forbid

this scenario by excluding allocations from hard interrupt context.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00100 · 0.8th percentile
Published
2026-07-01T13:32Z
EPSS history
Timeline
  • 01 JUL 13:32Z
    debugobjects: Don't call fill_pool() in early boot hardirq context
    cvelistv5