PT-2026-46020 · Linux · Linux Kernel
CVE-2026-46257
·
Published
2026-06-03
·
Updated
2026-07-22
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A kernel Oops occurs on ARM32 platforms when the
read current timer() function is called and the SP804 is not registered as the sched clock. This happens because the delay timer shares a clkevt instance with the sched clock. When sp804 clocksource and sched clock init is called without use sched clock set to 1, the sched clkevt is not properly initialized. Since sp804 register delay timer is invoked unconditionally, read current timer() attempts to call sp804 read on the uninitialized sched clkevt, causing a crash when accessing sched clkevt->value.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel