CVE-2026-72008

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue exists in the mediatek power domain driver. The driver unconditionally attempts to perform cleanup for DIRECT CTL domains when a probe fails for HW VOTER type power domains, and it unconditionally uses the scpsys domain is on() function in the probe path for any power domain with the MTK SCPD KEEP DEFAULT OFF flag. This occurs because the driver fails to verify the MTCMOS type before calling the appropriate check or power-off functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.