The VC4 driver in the Linux kernel does not fully quiesce V3D interrupt handlers when a runtime suspend occurs. The routine masks interrupt sources and calls synchronize_irq, but on platforms where the interrupt controller is ARMCTRL, active state is not reported. This allows an interrupt handler to run after the GPU power domain is powered off, causing reads of V3D registers to return the sentinel value 0xdeadbeef. The sentinel value triggers overflow workqueue scheduling even though the interrupt line has already been disabled, potentially consuming memory and destabilizing the system. The flaw does not allow direct code execution or privilege escalation, but can lead to resource exhaustion and service interruption.

The vulnerability resides in the Linux kernel's DRM VC4 driver, which is part of the open-source Linux kernel. It is tied to the ARMCTRL interrupt controller, which is found on Raspberry Pi models such as the RPi 0‑3, but the kernel code itself applies to any Linux kernel using that driver. Thus, any machine running the Linux kernel with the VC4 driver enabled and runtime suspend active may be susceptible, until the vendor releases the patch referenced in the advisory links.

In the current data, the CVSS score is 4.7, reflecting a moderate level of impact. The EPSS score is less than 1 %, indicating a very low estimated probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, so no known public exploits exist. The attack would require a local attacker to trigger power‑management transitions on a system that has the VC4 driver enabled. While this does not lead to remote code execution or significant data disclosure, repeated failures can consume memory and potentially cause the system or driver to become unstable, resulting in a denial‑of‑service condition.