PT-2026-68434 · Linux+1 · Linux Kernel+1

CVE-2026-64602

·

Published

2026-08-06

·

Updated

2026-09-07

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the spear adc probe() function within drivers/iio/adc/spear adc.c where the interrupt handler is registered using devm request irq() before the st->completion variable is initialized via init completion(). If an interrupt occurs after the handler registration but before initialization, the spear adc isr() function calls complete() on the uninitialized st->completion variable. This leads to the acquisition of an uninitialized wait.lock and the traversal of a zeroed task list in swake up locked(), resulting in a NULL list entry dereference and a kernel panic (KASAN wild-memory-access).
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-64602
OPENSUSE-SU-2026:11476-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu