Kernel Panic Vulnerability in LPC32XX ADC by Linux

CVE-2026-64500

What is CVE-2026-64500?

A vulnerability exists in the LPC32XX ADC driver within the Linux kernel that can lead to a kernel panic. The issue arises when the driver registers its interrupt handler prior to initializing a required completion object. If an interrupt occurs during this critical period, the handler attempts to call complete() on an uninitialized object, potentially resulting in a dereference of a null pointer. This could cause the system to crash unexpectedly. To mitigate this issue, the initialization of the completion object must be prioritized before the registration of the interrupt handler.

References