PT-2026-84949 · Linux · Linux
CVE-2026-80751
·
Published
2026-09-03
·
Updated
2026-09-03
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: mediatek: mfg: initialize prev o in mtk mfg attach dev()
mtk mfg attach dev() reads prev o on the first iteration of its loop,
in "if (prev o && prev o->freq == o->freq)", before prev o is assigned
at the end of the loop body. On that first iteration, evaluating prev o
reads an indeterminate value. If it is non-NULL, the condition
dereferences a stale or invalid pointer, potentially faulting or
incorrectly skipping the first OPP.
Initialize prev o to NULL. This matches the intent as well: there is no
previous OPP to compare against on the first iteration.
Found with Clang's -Wconditional-uninitialized.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux