CVE-2026-80751

High

Description

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() reads prev_o on the first iteration of its loop, in "if (prev_o && prev_o->freq == o->freq)", before prev_o is assigned at the end of the loop body. On that first iteration, evaluating prev_o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP. Initialize prev_o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration. Found with Clang's -Wconditional-uninitialized.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedSep 3, 2026
First seenSep 3, 2026

How to fix

Update
  • Linux Linuxde4eec0dfde8c0e27f8915bbb244d17ff68f2fb4, 090a95dbe13df9965279b588d97eda134831769c or later

Affected products

ProductAffected versionsFixed in
Linux Linuxf08e7a4e8d6ac4de677727af352ea33c6ce9f444 ≤ v < de4eec0dfde8c0e27f8915bbb244d17ff68f2fb4, f08e7a4e8d6ac4de677727af352ea33c6ce9f444 ≤ v < 090a95dbe13df9965279b588d97eda134831769c, 6.19de4eec0dfde8c0e27f8915bbb244d17ff68f2fb4, 090a95dbe13df9965279b588d97eda134831769c

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.