SB2026090425 - NULL pointer dereference in Linux kernel soc xilinx
Published: September 4, 2026
Security Bulletin ID
SB2026090425
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2026-80743)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper initialization of IRQ handler data in the Xilinx formatter PCM IRQ handlers when an interrupt occurs after IRQ registration and before driver data is set. A local user can trigger an interrupt during device probing to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/09e4c486348e176c083f8bee9169ae8f408cf8d1
- https://git.kernel.org/stable/c/0d58a70b6dc7b65772e3ef7c43beb91882cf9ed5
- https://git.kernel.org/stable/c/721cfeb0b9572084435695ae535411b921d1ea68
- https://git.kernel.org/stable/c/7d857aec162fb02d10ce326aecc1ac7509c31f43
- https://git.kernel.org/stable/c/a85315f2eb06adc5597a7103e1910fc7d0d35ffd
- https://git.kernel.org/stable/c/b4ef887bee4d3c177adac5d1eab8b2de31b08ac3
- https://git.kernel.org/stable/c/f12afefb7b01f94d6d66d397f323a9914edbf70e
- https://git.kernel.org/stable/c/f51a540b14eecb8667bbe450192318271b87631e