CVE-2026-64500

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the lpc32xx adc probe() function within the drivers/iio/adc/lpc32xx adc.c file. The function registers an interrupt handler using devm request irq() before initializing the st->completion variable with init completion(). If an interrupt occurs after the handler is registered but before the completion is initialized, the lpc32xx adc isr() function calls complete() on an uninitialized completion. This leads to the acquisition of an uninitialized wait.lock and the traversal of a zeroed task list in swake up locked(), resulting in a NULL list entry dereference and a kernel panic. KASAN (Kernel Address Sanitizer) identifies this as a wild-memory-access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.