PT-2026-84949 · Linux · Linux

CVE-2026-80751

·

Published

2026-09-03

·

Updated

2026-09-03

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: mediatek: mfg: initialize prev o in mtk mfg attach dev()
mtk mfg attach dev() reads prev o on the first iteration of its loop, in "if (prev o && prev o->freq == o->freq)", before prev o is assigned at the end of the loop body. On that first iteration, evaluating prev o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP.
Initialize prev o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration.
Found with Clang's -Wconditional-uninitialized.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-80751

Affected Products

Linux