Executive brief
A vulnerability was identified in the Linux kernel's reset driver for Amlogic T7 chips. This issue could cause the system to crash (kernel panic) if the reset functionality is triggered, due to missing internal instructions. At the time of discovery, this specific hardware component was not yet widely utilized in active systems, reducing the immediate risk of operational impact.
Technical details
A null pointer dereference vulnerability exists in the Amlogic T7 SoC reset driver within the Linux kernel. The root cause is the omission of '.reset_ops' in the 't7_param' structure in 'drivers/reset/amlogic/reset-meson.c'. If the reset controller is accessed, the kernel attempts to dereference a null pointer, leading to a system crash. This is a local vulnerability requiring the ability to trigger hardware reset operations. Patches have been merged into stable branches including 6.18.33 and 7.0.10.
Affected products
- Linux Linux 6.13 to 6.18.32, 7.0.9
Timeline
- 2026-03-31: other: Patch authored
- 2026-06-26: disclosed: CVE published