Impact
During a system resume on Tegra platforms, the Linux kernel’s PMC driver invoked generic_handle_irq() from a non‑interrupt context, violating the function’s contract and producing a warning. The vulnerability does not trigger a crash or denial of service; it highlights unsafe API usage that could potentially lead to kernel instability under certain conditions, which is inferred from the description.
Affected Systems
Linux kernel builds that include the Tegra PMC driver, specifically all releases prior to the commit that introduces IRQ_WORK_INIT_HARD. Both standard and PREEMPT_RT kernels are affected; on PREEMPT_RT systems the issue requires that the driver use IRQ_WORK_INIT_HARD so that the work runs in hardirq context.
Risk and Exploitability
With a CVSS score of 5.5 the vulnerability is medium severity. The EPSS score of less than 1% indicates a very low likelihood of exploitation, and the flaw is not listed in CISA’s KEV catalog. It is inferred that exploitation would require privileged local access to trigger a suspend/resume cycle, and the description does not indicate remote or privilege‑escalation capabilities. The risk is mainly the presence of the warning and the potential for kernel instability in edge situations.
OpenCVE Enrichment