PT-2026-84949 · Git+1 · Kernel+1
CVE-2026-80751
·
Publicado
2026-09-03
·
Atualizado
2026-09-03
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: mediatek: mfg: initialize prev o in mtk mfg attach dev()
mtk mfg attach dev() reads prev o on the first iteration of its loop,
in "if (prev o && prev o->freq == o->freq)", before prev o is assigned
at the end of the loop body. On that first iteration, evaluating prev o
reads an indeterminate value. If it is non-NULL, the condition
dereferences a stale or invalid pointer, potentially faulting or
incorrectly skipping the first OPP.
Initialize prev o to NULL. This matches the intent as well: there is no
previous OPP to compare against on the first iteration.
Found with Clang's -Wconditional-uninitialized.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Kernel
Linux