Null Dereference Vulnerability in Linux Kernel's IRQ Handler for DaVinci MMC Host

CVE-2026-97502

What is CVE-2026-97502?

A vulnerability in the Linux kernel's DaVinci MMC IRQ handler could lead to a null dereference scenario. This occurs when both 'host->cmd' and 'host->data' are checked. If 'host->data' is NULL, the IRQ handler may attempt to dereference it, resulting in a crash and potential system instability. The vulnerability affects the handling of read data timeouts and CRC errors, where the absence of a valid data pointer can cause the kernel to terminate unexpectedly. Mitigation efforts include guarding these branches against NULL data pointers to prevent this critical flaw.

References