The vulnerability arises from non‑atomic read–modify–write operations on shared interrupt state fields—‘rising’ and ‘falling’—in the Mediatek MT7621 GPIO driver. Concurrent calls to ‘mediatek_gpio_irq_type()’ for different interrupts on the same bank can overwrite each other’s configuration. This race condition corrupts the bank’s trigger state, potentially causing GPIO interrupts to fire incorrectly or not at all. The impact is operational disruption through erratic interrupt behavior, rather than a direct code execution path.

All Linux kernels that include the Mediatek MT7621 GPIO driver are affected. The vendor is Linux, and the product is the Linux kernel itself. Devices such as embedded routers, access points, and other Mediatek‑based platforms that use the kernel are impacted. No explicit version range is supplied, so any kernel containing this driver at the time of the vulnerability is considered at risk.

The flaw requires concurrent execution of the kernel function that sets the IRQ type. The CVSS score of 5.5 indicates moderate severity. Inference suggests that a local user or process with elevated privileges could trigger the race by simultaneously configuring GPIO pins on the same bank, though no known exploits exist. The EPSS score of <1% indicates a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because the issue is limited to a race condition on kernel state and does not provide a direct code‑execution vector, the principal risk is operational disruption rather than a direct exploit path.