Executive brief
A vulnerability in the Linux kernel's support for Qualcomm SM8450 processors could cause the system to crash. This occurs during the initialization of internal communication paths between hardware components. An exploit would result in a complete system failure (kernel panic), impacting the availability of the device.
Technical details
A NULL pointer dereference exists in the icc_link_nodes() function within the Qualcomm SM8450 interconnect driver (drivers/interconnect/qcom/sm8450.c). The issue was introduced during a transition to dynamic IDs, where two specific links (qhs_compute_cfg and qhs_lpass_cfg) were left using old static identifiers instead of pointers to the destination nodes. When the driver attempts to probe these links during runtime, it encounters an invalid destination pointer, resulting in a kernel panic. This is a local denial-of-service vulnerability that triggers during the device probe phase or runtime interconnect configuration. Patches have been released in the stable Linux kernel trees.
Affected products
- Linux Linux kernel SM8450 platform driver
Timeline
- 2026-03-14: disclosed: Initial patch submitted by Vladimir Zapolskiy
- 2026-04-11: patched: Committed to stable kernel tree by Greg Kroah-Hartman
- 2026-05-08: advisory: CVE-2026-43335 published