-
CVE-2026-53332
- EPSS 0.17%
- Veröffentlicht 01.07.2026 13:32:16
- Zuletzt bearbeitet 04.07.2026 12:17:01
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with the NGD driver being probed, or the remoteproc is already up when the PDR lookup is being registered, or in the theoretical event that we get an interrupt from the hardware, these callbacks will operate on uninitialized data. This result in issues to boot the affected boards. One such example can be seen in the following fault, where qcom_slim_ngd_ssr_pdr_notify() schedules work on the NULL ngd_up_work. [ 21.858578] ------------[ cut here ]------------ [ 21.858745] WARNING: kernel/workqueue.c:2338 at __queue_work+0x5e0/0x790, CPU#2: kworker/2:2/116 ... [ 21.859251] Call trace: [ 21.859255] __queue_work+0x5e0/0x790 (P) [ 21.859265] queue_work_on+0x6c/0xf0 [ 21.859273] qcom_slim_ngd_ssr_pdr_notify+0x110/0x150 [slim_qcom_ngd_ctrl] [ 21.859304] qcom_slim_ngd_ssr_notify+0x24/0x40 [slim_qcom_ngd_ctrl] [ 21.859318] notifier_call_chain+0xa4/0x230 [ 21.859329] srcu_notifier_call_chain+0x64/0xb8 [ 21.859338] ssr_notify_start+0x40/0x78 [qcom_common] [ 21.859355] rproc_start+0x130/0x230 [ 21.859367] rproc_boot+0x3d4/0x518 ... Move the enablement of interrupts, and the registration of SSR and PDR until after the NGD device has been registered. This could be further refined by moving initialization to the control driver probe and by removing the platform driver model from the picture.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
917809e2280bb83994be8b642373fd941d40c407
Version <
946b97d632f0f58a705dafac644c1e9346e01f35
Status
affected
Version
917809e2280bb83994be8b642373fd941d40c407
Version <
fa3790c7ea98328ddc3f7d8bf40247556245a6fc
Status
affected
Version
917809e2280bb83994be8b642373fd941d40c407
Version <
24ec89123fc9d0d24ce719dcf7fd6c57e5b0d753
Status
affected
Version
917809e2280bb83994be8b642373fd941d40c407
Version <
08564e15c47a5fb0af6643a43ee15521d49bcdea
Status
affected
Version
917809e2280bb83994be8b642373fd941d40c407
Version <
2a9d50e9ea406e0c8735938484adc20515ef1b47
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
4.19
Status
affected
Version
0
Version <
4.19
Status
unaffected
Version <=
5.10.*
Version
5.10.260
Status
unaffected
Version <=
6.12.*
Version
6.12.94
Status
unaffected
Version <=
6.18.*
Version
6.18.36
Status
unaffected
Version <=
7.0.*
Version
7.0.13
Status
unaffected
Version <=
*
Version
7.1
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.064 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/fa3790c7ea98328ddc3f7d8bf40247556245a6fc
https://git.kernel.org/stable/c/24ec89123fc9d0d24ce719dcf7fd6c57e5b0d753
https://git.kernel.org/stable/c/08564e15c47a5fb0af6643a43ee15521d49bcdea
https://git.kernel.org/stable/c/2a9d50e9ea406e0c8735938484adc20515ef1b47
https://git.kernel.org/stable/c/946b97d632f0f58a705dafac644c1e9346e01f35