Linux Kernel PL031 RTC Feature Null Pointer Dereference Vulnerability

A null pointer dereference vulnerability has been identified in the Linux kernel's PL031 Real-Time Clock (RTC) driver. This issue arises when there is no interrupt line, causing the RTC alarm feature to be disabled. The vulnerability occurs because the alarm feature bit is cleared before the RTC device is allocated, leading to a null pointer dereference. The issue has been resolved by adjusting the timing of the alarm feature bit clearance, ensuring it occurs after the RTC device allocation.

Impact

Exploitation of this vulnerability leads to a null pointer dereference, causing a kernel crash.