Linux Kernel Mediatek SVS IRQ Initialization Vulnerability

A vulnerability in the Linux kernel's Mediatek SVS (Smart Voltage Scaling) driver can lead to a NULL pointer dereference. This issue occurs when the system is booted using kexec, as the peripheral may trigger an interrupt request (IRQ) before the necessary data structures are fully initialized. The vulnerability has been addressed by modifying the IRQ handling to occur later in the initialization process.

Impact

Exploitation of this vulnerability causes a kernel NULL pointer dereference, leading to a crash of the affected system component or process.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.