net: stmmac: dwmac1000: clear the RGMII status interrupt

{
  "id": "fba1d04c9d7ffe2e72f59f9c969d4b73557a9e6729d21cc091a71a8cb250eb20",
  "url": "https://www.cve.org/CVERecord?id=CVE-2026-99188",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "net: stmmac: dwmac1000: clear the RGMII status interrupt",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 (\"net: stmmac: remove SGMII/RGMII/SMII interrupt handling\") nothing on the RGMII path reads GMAC_RGSMIIIS, so RGSMIIIS stays pending behind GMAC_INT_MASK from the first link change on. stmmac_resume() resets the MAC in stmmac_hw_setup(); the reset sets GMAC_INT_MASK to 0 until dwmac1000_core_init() writes the mask again, and the pending status storms the line: dwmac_dma_interrupt: unexpected status 04000000 A register dump at the first message on ODROID-HC4 showed it: core int_status 00000001 int_mask 00000000 pmt 00000000 rgsmiiis 0000000d When the resume thread runs on the CPU that takes the MAC interrupt, the storm starves it: a soft lockup, then a watchdog reset or a hang. Read GMAC_RGSMIIIS in dwmac1000_irq_status() when the status is not masked, as the driver did before 2e2c878a3141; the read clears it. Wake-on-LAN resume from s2idle with the resume thread and the MAC interrupt on one CPU: Helios64 (dwmac-rk), 7.3-rc6, soft-locked in 3 of 3 resumes without a fix and in 0 of 10 with this patch; it ran with an out-of-tree dwmac-rk change that keeps the GMAC powered across suspend. ODROID-HC4 (dwmac-meson8b): 0 of 10 with this patch, 2 of 2 without a fix on a 7.3-rc5 build. irq_rgmii_n went up by one per resume.",
    "evidence": "cve:CVE-2026-99188",
    "products": [
      {
        "name": {
          "value": "Linux",
          "evidence": "/containers/cna/affected/0/product"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      },
      {
        "name": {
          "value": "Linux",
          "evidence": "/containers/cna/affected/1/product"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2026-99188",
      "aliases": [
        "CVE-2026-99188"
      ],
      "metrics": [],
      "affected": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2e2c878a314175a4c3b76ee3be455f543438f472",
              "lessThan": "affc6d572935282ef9ab1e0b790cbc31e5ad8bca",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "2e2c878a314175a4c3b76ee3be455f543438f472",
              "lessThan": "aa07285705f8d5bac464eb1c5b7412f8e88b91e1",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/stmicro/stmmac/dwmac1000_core.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.19"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "6.19",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "7.2.13",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/stmicro/stmmac/dwmac1000_core.c"
          ],
          "defaultStatus": "affected"
        }
      ],
      "modified": "2026-10-28T10:35:45.591Z",
      "provider": "cve",
      "references": [
        "https://git.kernel.org/stable/c/affc6d572935282ef9ab1e0b790cbc31e5ad8bca",
        "https://git.kernel.org/stable/c/aa07285705f8d5bac464eb1c5b7412f8e88b91e1"
      ],
      "provider_metadata": {
        "cna": {
          "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
          "shortName": "Linux",
          "dateUpdated": "2026-10-28T10:35:45.591Z"
        }
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-99188",
        "evidence": "/cveMetadata/cveId"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-cve",
  "document_id": 425366,
  "published_at": "2026-10-28T10:35:45.591+00:00"
}