CVE-2021-47037: 
Linux Kernel vulnerability analysis and mitigation

Q6afe-clocks driver in the Linux kernel can experience a vulnerability when reprobing occurs, for example after APR services restart following a firmware crash. The driver would crash with an oops because hw.init gets cleared during the first _probe call (Kernel Commit).

The vulnerability affects the ASoC (ALSA System on Chip) q6afe-clocks driver in the Linux kernel. The issue stems from using a static array of clocks that gets cleared during the initial probe, leading to potential crashes during subsequent reprobing events. The fix involves rewriting the driver to populate clock data at runtime instead of relying on a static array (Kernel Commit).

When exploited, this vulnerability can cause the kernel to crash (oops) when the Q6afe-clocks driver attempts to reprobe, particularly after firmware crashes or APR service restarts (Kernel Commit).

The vulnerability is triggered through normal system operations, specifically when the APR services are restarted after a firmware crash, making it a reliability issue rather than a security exploit (Kernel Commit).

The issue has been fixed by rewriting the driver to fill the clock data at runtime rather than using a static array of clocks. The fix was implemented in the Linux kernel through commit 96fadf7e8ff49fdb74754801228942b67c3eeebd (Kernel Commit).