CVE-2026-80751

pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()

State
Published
Severity
7.8 High
Published
Sep 3, 2026
Updated
Sep 4, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()

mtk_mfg_attach_dev() reads prev_o on the first iteration of its loop, in "if (prev_o && prev_o->freq == o->freq)", before prev_o is assigned at the end of the loop body. On that first iteration, evaluating prev_o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP.

Initialize prev_o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration.

Found with Clang's -Wconditional-uninitialized.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f08e7a4e8d6ac4de677727af352ea33c6ce9f444 to before de4eec0dfde8c0e27f8915bbb244d17ff68f2fb4Affected
  • f08e7a4e8d6ac4de677727af352ea33c6ce9f444 to before 090a95dbe13df9965279b588d97eda134831769cAffected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.