The Linux kernel’s mtd raw NAND cadence driver registers an interrupt handler before the IRQ lock and completion object have been initialized. During this narrow window an asynchronously delivered NAND interrupt can access uninitialized synchronization primitives, which can cause a kernel panic or other abrupt termination of the system. This flaw is an instance of improper initialization of kernel objects.

Any Linux kernel build that includes the mtd raw NAND cadence driver and has not applied the recent patch commits. No exact kernel version range is specified; consequently, every kernel prior to the fix that contains this driver is potentially affected. The affected vendor is the Linux kernel, and the relevant product is the kernel image that incorporates the cadence driver.

The CVSS score is 4.1 and the EPSS score is less than 1 %. The flaw is unlikely to be widely exploited, as it requires a triggering NAND interrupt and direct access to the hardware peripheral, which a local attacker with sufficient privileges could induce. The KEV catalog does not list this vulnerability. Successful exploitation would most directly lead to loss of availability via a kernel crash rather than data theft or privilege escalation. Based on the description, the likely attack vector would be a local trigger of the NAND interrupt, for example through software manipulation of the device or a user‑space program with elevated rights.