CVE-2026-72424rtc: msc313: fix NULL deref in shared IRQ handler at probe
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313_rtc_probe() calls devm_request_irq() with IRQF_SHARED and &pdev->dev as the cookie, but platform_set_drvdata() is only called later after the clock setup. With a shared IRQ line, another device on the same line can trigger the handler in that window. The handler does dev_get_drvdata() on the cookie, gets NULL, and dereferences priv->rtc_base in interrupt context. Pass priv as the cookie directly so the handler reads it from dev_id without the lookup, removing the dependency on probe order.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from be7d9c9161b9c76edeff15e79edc2f256568fe05 before ece7b9ffde23e2ccd7567761ac27463ded43932c; from be7d9c9161b9c76edeff15e79edc2f256568fe05 before 52c73b6992b46ed476590ed526faa033d4fbfc5d; from be7d9c9161b9c76edeff15e79edc2f256568fe05 before bc1f61a9b97d65de21c2681bcf0b5b1392c58486; from be7d9c9161b9c76edeff15e79edc2f256568fe05 before 1f6a4aec0d36647eb2f67cd69db22bd28cabe2cb; from be7d9c9161b9c76edeff15e79edc2f256568fe05 before bb3e624808c981fe881cb79037be63e680ed7d38; from be7d9c9161b9c76edeff15e79edc2f256568fe05 before a369f48be8de426a7d2bca18dbd46c2ad1138803 | CNA record |
References
- https://git.kernel.org/stable/c/ece7b9ffde23e2ccd7567761ac27463ded43932c
- https://git.kernel.org/stable/c/52c73b6992b46ed476590ed526faa033d4fbfc5d
- https://git.kernel.org/stable/c/bc1f61a9b97d65de21c2681bcf0b5b1392c58486
- https://git.kernel.org/stable/c/1f6a4aec0d36647eb2f67cd69db22bd28cabe2cb
- https://git.kernel.org/stable/c/bb3e624808c981fe881cb79037be63e680ed7d38
- https://git.kernel.org/stable/c/a369f48be8de426a7d2bca18dbd46c2ad1138803
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.