CVE-2026-46257

A flaw was found in the Linux kernel's SP804 timer driver. On ARM32 platforms where the SP804 is not registered as the scheduling clock, the delay timer's clock event instance may not be properly initialized. This can lead to a kernel Oops, which is a system crash, when the system attempts to read from the uninitialized timer. This vulnerability could allow a local attacker to cause a Denial of Service (DoS) on the affected system.