Linux Kernel SP804 Timer Driver Oops Fix Vulnerability on ARM32 Platforms

Vulnerability

A vulnerability in the Linux kernel's SP804 timer driver for ARM32 platforms has been addressed. The issue arose because the delay timer shared the same clock event instance with the scheduler clock. On certain platforms, the scheduler clock event was not properly initialized, leading to a kernel Oops error when the current timer was read. This vulnerability affected Linux kernel versions prior to the fix.

Impact

The vulnerability could lead to a kernel Oops, causing a crash by accessing an uninitialized scheduler clock event value.

Remediation

Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The specific commit that resolves the issue is available in the Linux kernel stable tree.

Added: Jun 3, 2026, 6:35 PM
Updated: Jun 3, 2026, 6:35 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.5
remediation
7.7
relevance
9.9
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.