In the Linux kernel, the following vulnerability has been resolved:
ASoC: xilinx: formatterpcm: pass auddrv_data to irq handlers
The irq handlers take a struct device pointer and call devgetdrvdata() to obtain the driver data. However, the driver data is only set at the end of probe, after devmrequestirq(), so an interrupt taken in between causes the handlers to pass a NULL pointer to readl() and crash.
Pass the private data directly as the devmrequestirq() argument instead of the device pointer, matching what the handlers expect.