The Linux kernel ARM integrator platform had a vulnerability where early initialization code called syscon_regmap_lookup_by_compatible, which allocates memory before the memory management subsystem is initialized. This leads to a NULL pointer dereference or an -ENOMEM error. The crash manifests as a kernel oops due to dereferencing a NULL pointer at virtual address 0x0000000c. The problem is compiler-dependent and reproducible with gcc 10.x, 11.x, and 13.x. The fix was implemented by relocating the early initialization code into the standard machine initialization code to ensure memory management is ready before allocation calls.

This vulnerability can cause a denial of service by crashing the kernel during early boot on affected ARM integrator platforms. There is no impact on confidentiality or integrity. The CVSS score is 5.5 (medium severity) reflecting the availability impact due to kernel crashes. No known exploits are reported in the wild.

A fix has been implemented by moving the early initialization code to the standard machine initialization phase. Since no explicit patch links are provided, users should update to a Linux kernel version that includes commit bdb249fce9ad4 or later. Patch status is not explicitly confirmed; check the vendor or Linux kernel repository for the official fix and updated versions.