The Linux kernel Mediatek power domain driver had a flaw where it unconditionally performed cleanup and power state checks on DIRECT_CTL domains without verifying if the domain was powered on, and used the scpsys_domain_is_on() function indiscriminately on domains with the MTK_SCPD_KEEP_DEFAULT_OFF flag. This could cause a null pointer kernel panic if the probe for HW_VOTER type power domains failed. The fix involved adding checks for MTCMOS type domains and calling the correct power on/off functions accordingly, including introducing internal variations of power off functions to safely handle domain pointers during cleanup.

This vulnerability could cause a kernel panic (null pointer dereference) in affected Linux kernel Mediatek power domain drivers during hardware voter cleanup or power state checks, potentially leading to system instability or denial of service. However, the issue was not observed in practice because the problematic conditions (probe failure of HWV domains and specific domain flags) did not occur in existing deployments.

A fix has been implemented in the Linux kernel source to add proper type checks and use correct power management functions for Mediatek power domains. Users should update to the fixed kernel version once available. Since this is a kernel-level issue, applying the official kernel patch or upgrading to a kernel version containing this fix is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the official Linux kernel advisories or source repositories for the exact fixed versions.