CVE-2026-53332

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd

When the remoteproc starts in parallel with the NGD driver being probed,

or the remoteproc is already up when the PDR lookup is being registered,

or in the theoretical event that we get an interrupt from the hardware,

these callbacks will operate on uninitialized data. This result in

issues to boot the affected boards.

One such example can be seen in the following fault, where

qcom_slim_ngd_ssr_pdr_notify() schedules work on the NULL ngd_up_work.

[ 21.858578] ------------[ cut here ]------------

[ 21.858745] WARNING: kernel/workqueue.c:2338 at __queue_work+0x5e0/0x790, CPU#2: kworker/2:2/116

...

[ 21.859251] Call trace:

[ 21.859255] __queue_work+0x5e0/0x790 (P)

[ 21.859265] queue_work_on+0x6c/0xf0

[ 21.859273] qcom_slim_ngd_ssr_pdr_notify+0x110/0x150 [slim_qcom_ngd_ctrl]

[ 21.859304] qcom_slim_ngd_ssr_notify+0x24/0x40 [slim_qcom_ngd

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References