CVE-2026-72424 rtc: msc313: fix NULL deref in shared IRQ handler at probe
A NULL pointer dereference in the Linux kernel RTC driver can cause a system crash when a shared IRQ is triggered during device probe.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72424?
CVE-2026-72424 is a vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
rtc: msc313: fix NULL deref in shared IRQ handler at probe
msc313_rtc_probe() calls devm_request_irq() with IRQF_SHARED and &pdev->dev as the cookie, but platform_set_drvdata() is only called later after the clock setup. With a shared IRQ line, another device on the same line can trigger the handler in that window. The handler does dev_get_drvdata() on the cookie, gets NULL, and dereferences priv->rtc_base in interrupt context.
Pass priv as the cookie directly so the handler reads it from dev_id without the lookup, removing the dependency on probe order.
Which versions are affected by CVE-2026-72424?
How do I fix CVE-2026-72424?
Apply the vendor's patch.
Is CVE-2026-72424 being exploited?
There is no known exploitation of CVE-2026-72424 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72424, DEBIAN-CVE-2026-72424, GHSA-cg6j-2hpf-xr59, UBUNTU-CVE-2026-72424.