Linux Kernel Venus Driver Spurious Interrupt Handling Vulnerability

A vulnerability in the Linux kernel's Venus media driver can lead to a NULL dereference. This issue occurs if an interrupt is registered before the handler is fully set up, allowing an interrupt to be processed prematurely. This flaw has been observed during system boot on Rb3Gen2.

Impact

The vulnerability can cause a NULL pointer dereference, leading to a system crash.

Reproduction

The vulnerability can be reproduced by loading the Venus media driver in a scenario where the interrupt is registered before the handler is properly initialized. This can happen during the system boot process on affected devices.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.