CVE-2026-80751
pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
Description
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() reads prev_o on the first iteration of its loop, in "if (prev_o && prev_o->freq == o->freq)", before prev_o is assigned at the end of the loop body. On that first iteration, evaluating prev_o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP. Initialize prev_o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration. Found with Clang's -Wconditional-uninitialized.
INFO
Published Date :
Sept. 3, 2026, 8:26 a.m.
Last Modified :
Sept. 3, 2026, 8:26 a.m.
Remotely Exploit :
No
Source :
Linux
Solution
- Initialize prev_o to NULL.
- Ensure loop logic handles the first iteration correctly.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-80751 vulnerability anywhere in the article.