How is it possible for the peripheral to ussue a new interrupt request before the old one is serviced ? You say it remains low until it is serviced, so how can it miss being serviced ?

A nice reset/supervisor chip should also work.