Linux Kernel NULL Pointer Dereference Vulnerability in QCOM SM8450 Interconnect

Vulnerability

A NULL pointer dereference vulnerability has been identified in the Linux kernel's handling of interconnects for the Qualcomm SM8450 platform. This issue arises from a change to dynamic IDs for SM8450 interconnects, which left two links unconverted. As a result, an invalid pointer to a destination interconnect can lead to a runtime NULL pointer dereference, causing a kernel panic. The vulnerability affects the Linux kernel stable tree.

Impact

Exploitation of this vulnerability leads to a kernel panic, causing a fatal exception and halting the system.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that resolves this issue is available in the Linux kernel stable tree.

Added: May 8, 2026, 3:21 PM
Updated: May 8, 2026, 3:21 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.5
remediation
7.7
relevance
7.8
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.