CVE-2026-72424

Received Received - Intake

NULL Dereference in Linux Kernel RTC Driver for MStar MSC313

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313_rtc_probe() calls devm_request_irq() with IRQF_SHARED and &pdev->dev as the cookie, but platform_set_drvdata() is only called later after the clock setup. With a shared IRQ line, another device on the same line can trigger the handler in that window. The handler does dev_get_drvdata() on the cookie, gets NULL, and dereferences priv->rtc_base in interrupt context. Pass priv as the cookie directly so the handler reads it from dev_id without the lookup, removing the dependency on probe order.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72424

EUVD

EUVD-2026-59323

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's msc313 RTC driver. During probe, the driver requests a shared IRQ before setting up device data. If another device on the same IRQ line triggers an interrupt in this window, the handler tries to access driver data that hasn't been set yet, causing a crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's RTC driver for MSC313 devices. Detection requires checking kernel logs for NULL pointer dereference errors during device probe or IRQ handling. Look for messages like 'Unable to handle kernel NULL pointer dereference' or 'NULL pointer passed to dev_get_drvdata' in dmesg or journalctl logs.

Impact Analysis

This could cause system crashes or instability when the affected hardware is used. The vulnerability only manifests during system boot or driver probe, potentially leading to boot failures or unexpected reboots if the hardware is present.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a Linux kernel issue related to a NULL dereference in an RTC driver during probe. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-72424. The patch changes how the IRQ handler cookie is passed to avoid the NULL dereference. If immediate kernel update is not possible, disable the affected RTC device or avoid using shared IRQ lines for MSC313 devices.

Hi! I’m here to help you understand CVE-2026-72424. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70