CVE-2026-68461

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the device property component where the fwnode init() function fails to initialize all fields of the fwnode handle structure. When a firmware node is allocated on the stack or on the heap using a non-zeroing allocation function, the secondary pointer contains uninitialized memory. This can lead to a memory dereference, for example, within the dev to swnode() function, because the pointer is neither NULL nor an error value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.