CVE-2026-80655

A flaw was found in the Linux kernel's zynqmp_power driver. A race condition during event registration could allow a local attacker to trigger a system crash. This occurs because certain work structures are registered before they are properly allocated and initialized. If firmware triggers an event in this specific window, a null pointer dereference occurs, leading to a Denial of Service (DoS).

A flaw of moderate impact was found in the Linux kernel's zynqmp_power driver, which is used on Xilinx ZynqMP-based SoCs. The driver registered handlers for suspend and subsystem restart events before the work structures used by those handlers (zynqmp_pm_init_suspend_work and zynqmp_pm_init_restart_work) were allocated and initialized. This created a race window in which a firmware-triggered event arriving immediately after registration could cause the event callback to dereference a NULL pointer in work_pending(), crashing the kernel. Successful exploitation of this race condition results in a local denial of service; there is no impact on confidentiality or integrity. Red Hat Product Security rates this flaw as moderate severity (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel streams are currently marked not affected because the vulnerable code is not present in the shipped kernel versions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.