Impact
An improper ordering of interrupt request setup in the Linux kernel’s RZ‑DMAC driver causes the interrupt handler to run before channel->ch_base and other critical data structures are fully initialized. If the handler attempts to access these incomplete structures, it can trigger invalid memory accesses leading to kernel crashes or other instability. The flaw manifests as a race condition that results in an out‑of‑band memory corruption scenario, potentially allowing unreliable system operation.
Affected Systems
The flaw affects all Linux kernel builds that include the RZ‑DMAC driver prior to the patch referenced in the advisory. All architectures that implement the driver – represented by Linux:Linux in the vendor list – are potentially impacted, with no specific version constraints supplied.
Risk and Exploitability
The CVSS score is 8.4, indicating a high severity. EPSS score is < 1%, indicating a very low exploitation probability. Attackers would need local or higher privileges to trigger the driver’s interrupt handling, so the attack vector is inferred to be local execution rather than remote. The vulnerability involves direct memory corruption in kernel space, which can lead to kernel crashes or other instability. The entry is not listed in the CISA KEV catalog, indicating that no known widespread exploits have been observed yet.
OpenCVE Enrichment
Debian DLA