CVE-2026-43335: interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()
In the Linux kernel, the following vulnerability has been resolved:
interconnect: qcom: sm8450: Fix NULL pointer dereference in icclinknodes()
The change to dynamic IDs for SM8450 platform interconnects left two links unconverted, fix it to avoid the NULL pointer dereference in runtime, when a pointer to a destination interconnect is not valid:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 <...> Call trace: icclinknodes+0x3c/0x100 (P) qcomiccrpmhprobe+0x1b4/0x528 platformprobe+0x64/0xc0 reallyprobe+0xc4/0x2a8 driverprobedevice+0x80/0x140 driverprobedevice+0x48/0x170 deviceattachdriver+0xc0/0x148 busforeachdrv+0x88/0xf0 deviceattach+0xb0/0x1c0 deviceinitialprobe+0x58/0x68 busprobedevice+0x40/0xb8 deferredprobeworkfunc+0x90/0xd0 processonework+0x15c/0x3c0 workerthread+0x2e8/0x400 kthread+0x150/0x208 retfromfork+0x10/0x20 Code: 900310f4 911d6294 91008280 94176078 (f94002a0) ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: Oops: Fatal exception
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43335?
CVE-2026-43335 is classified as a high severity vulnerability due to potential system crashes from NULL pointer dereference.
How do I fix CVE-2026-43335?
To fix CVE-2026-43335, update the Linux kernel on the affected SM8450 platform to the latest patched version.
What impact does CVE-2026-43335 have on systems?
CVE-2026-43335 can lead to system instability and crashes due to a NULL pointer dereference in the interconnect handling code.
Which software is affected by CVE-2026-43335?
CVE-2026-43335 affects the Linux kernel specifically for the Qualcomm SM8450 interconnect technology.
Is CVE-2026-43335 publicly disclosed?
Yes, CVE-2026-43335 has been publicly disclosed and is part of the open vulnerability database.