Executive brief
A vulnerability was identified in the Linux kernel's video driver for Broadcom VC4 graphics (commonly used in Raspberry Pi devices). The system fails to properly check for errors when setting up display-related interrupts, which could lead to system instability or a crash. This primarily affects the availability of the device's display and HDMI functions.
Technical details
A vulnerability exists in the vc4_hdmi_hotplug_init function within drivers/gpu/drm/vc4/vc4_hdmi.c. The driver calls platform_get_irq_byname() to retrieve IRQs for 'hpd-connected' and 'hpd-removed' events but stores the result in an unsigned integer and fails to check for negative error codes. These unvalidated values are then passed directly to devm_request_threaded_irq(). An attacker with local access could potentially exploit this improper error handling to cause a kernel panic or denial of service. The issue has been resolved by correctly checking for negative return values before proceeding with IRQ registration.
Affected products
- Linux Linux Kernel vc4 driver component
Timeline
- 2026-02-23: other: Patch authored
- 2026-03-05: patched: Initial patch commit
- 2026-05-05: disclosed: CVE published
References
- https://git.kernel.org/stable/c/0185e0494a561edfc482507f9de89c2ad798b33d
- https://git.kernel.org/stable/c/0c1b117f7ba46fb8f6ebc5e0bfe5b58568c301ba
- https://git.kernel.org/stable/c/63c11b19cdc154fa848a6c3b535bfb1dc7b60378
- https://git.kernel.org/stable/c/9c10b83a004442c93d7a484c3d221a06a45821e1
- https://git.kernel.org/stable/c/e597a809a2b97e927060ba182f58eb3e6101bc70
- https://git.kernel.org/stable/c/ef2ee9db13b68c5e332b77c0a7108a2d4d56e114