CVE-2026-46134

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description A NULL dereference occurs in the Linux kernel when the cros typec register thunderbolt() function fails to initialize the adata->lock mutex. This issue manifests when the uninitialized mutex is subsequently acquired, such as within the cros typec altmode work() function.

Recommendations Update to version 7.0.11-1.1.