CVE-2026-72424

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the shared IRQ handler during the probe process of the msc313 RTC driver. The function msc313 rtc probe() calls devm request irq() using IRQF SHARED and passes &pdev->dev as the cookie before platform set drvdata() is executed. If another device sharing the same IRQ line triggers the handler during this window, the handler calls dev get drvdata() on the cookie, which returns NULL. Subsequently, the handler attempts to dereference priv->rtc base within the interrupt context, leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.