PT-2026-84949 · Git+1 · Kernel+1

CVE-2026-80751

·

Publicado

2026-09-03

·

Atualizado

2026-09-03

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: mediatek: mfg: initialize prev o in mtk mfg attach dev()
mtk mfg attach dev() reads prev o on the first iteration of its loop, in "if (prev o && prev o->freq == o->freq)", before prev o is assigned at the end of the loop body. On that first iteration, evaluating prev o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP.
Initialize prev o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration.
Found with Clang's -Wconditional-uninitialized.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-80751

Produtos afetados

Kernel
Linux