CVE-2024-26876

What it actually does

Race during adv7511_probe allows a pending IRQ to invoke adv7511_cec_irq_process before adv7511_cec_init has run, causing cec_received_msg_ts to dereference uninitialized memory and trigger a kernel oops.

Why it matters to the business

Systems using the affected driver may experience sudden kernel crashes and reboots during boot or module load, producing unplanned downtime on embedded or desktop Linux deployments that include the adv7511 bridge.

How an attack unfolds

An attacker with physical or local access arranges for an IRQ to be asserted before the probe routine completes cec initialization; when the threaded IRQ handler runs it calls into the CEC stack with uninitialized state, resulting in an immediate kernel panic.

How to fix it

Upgrade the Linux kernel to a version containing commit 25399297bb457f7fcf8e3f91e85945b255b111b5 (or later) so that IRQ registration occurs after adv7511_cec_init; rebuild and reboot affected systems.

How to confirm the fix worked

Confirm the running kernel contains the listed commit; verify that modprobe or boot logs no longer show the oops signature and that probe order matches the fixed source.

Typical attack path

1. Attacker ensures an IRQ is already pending when the adv7511 driver loads
2. Kernel begins adv7511_probe and registers the IRQ handler before CEC structures are initialized
3. IRQ thread executes adv7511_irq_handler which calls adv7511_cec_irq_process
4. cec_received_msg_ts dereferences uninitialized memory and crashes the kernel

How to detect it

Search kernel logs and crash dumps for the call trace containing cec_received_msg_ts, adv7511_cec_irq_process and adv7511_irq_handler around the time of module load or device probe.

What your security team should do

• Apply the referenced kernel commit or distribution update immediately on all systems exposing the adv7511 hardware
• Prioritize reboot of production devices that load this driver at boot
• Add the fixed commit hash to internal kernel patch review and SBOM tracking