CVE-2026-68461

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

If a firmware node is allocated on the stack (for instance: temporary software node whose life-time we control) or on the heap - but using a non-zeroing allocation function - and initialized using fwnode_init(), its secondary pointer will contain uninitialized memory which likely will be neither NULL nor IS_ERR() and so may end up being dereferenced (for example: in dev_to_swnode()). Set fwnode->secondary to NULL on initialization. While at it: initialize the remaining fields of struct fwnode_handle too just to be sure.

[ Fix typo in commit message. - Danilo ]

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-665 Improper Initialization

Affected Products

Product	Versions
LinuxLinux	01bb86b380a306bd937c96da36f66429f3362137 to before 0198d579948322cda5178b9672d448375a32f947Affected 01bb86b380a306bd937c96da36f66429f3362137 to before 173b61c9276c7b3a5fbcc63ae7aafc897fee1e18Affected 01bb86b380a306bd937c96da36f66429f3362137 to before f0b4e1cc8ad76baf49d898727eb52e91a4ef0544Affected 01bb86b380a306bd937c96da36f66429f3362137 to before c8542b68ba6ef4f61072098893a3f5b71c569b6cAffected 01bb86b380a306bd937c96da36f66429f3362137 to before 9c86a1f930bb2ddb85f867b4736716e82a4a4683Affected 01bb86b380a306bd937c96da36f66429f3362137 to before c81e2af41de6a159837c7129a4fc444ac6e48046Affected 01bb86b380a306bd937c96da36f66429f3362137 to before 7eba000621fff223dd7bab484d48918c7c77a307Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

01bb86b380a306bd937c96da36f66429f3362137 to before 0198d579948322cda5178b9672d448375a32f947Affected
01bb86b380a306bd937c96da36f66429f3362137 to before 173b61c9276c7b3a5fbcc63ae7aafc897fee1e18Affected
01bb86b380a306bd937c96da36f66429f3362137 to before f0b4e1cc8ad76baf49d898727eb52e91a4ef0544Affected
01bb86b380a306bd937c96da36f66429f3362137 to before c8542b68ba6ef4f61072098893a3f5b71c569b6cAffected
01bb86b380a306bd937c96da36f66429f3362137 to before 9c86a1f930bb2ddb85f867b4736716e82a4a4683Affected
01bb86b380a306bd937c96da36f66429f3362137 to before c81e2af41de6a159837c7129a4fc444ac6e48046Affected
01bb86b380a306bd937c96da36f66429f3362137 to before 7eba000621fff223dd7bab484d48918c7c77a307Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.