CVE-2026-72424

A flaw was found in the Linux kernel's rtc: msc313 component. During the probe phase, a shared Interrupt Request (IRQ) handler could be triggered by another device before the necessary driver data was fully initialized. This could lead to a null pointer dereference, where the system attempts to access an invalid memory location. A local attacker could potentially exploit this to cause a system crash, leading to a denial of service.

A low impact flaw was found in the Linux kernel MStar MSC313 RTC driver. During device probe, msc313_rtc_probe() registers a shared interrupt handler using &pdev->dev as the cookie before platform_set_drvdata() stores the driver data. If another device sharing the same IRQ line raises an interrupt within this window, the handler reads NULL from dev_get_drvdata() and dereferences priv->rtc_base in interrupt context, causing a kernel crash and a local denial of service. Red Hat rates the impact of this flaw as low because triggering it requires a narrow probe-time race on hardware where this RTC device shares its interrupt line with another device, even though the Red Hat CVSS 3.1 base score is 5.5. All currently tracked Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel streams are assessed as not affected, with the recorded justification that the vulnerable code is not present in those products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.