CVE-2026-46134: platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration
Published May 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: crosectypec: Init mutex in Thunderbolt registration
crostypecregisterthunderbolt() missed initializing the adata->lock mutex. This leads to a NULL dereference when the mutex is later acquired (e.g. in crostypecaltmodework()).
Initialize the mutex in crostypecregisterthunderbolt() to fix the issue.
Affected Software
5 affected components
Linux Linux kernel
Linux Linux kernel>=6.14<6.18.30
Linux Linux kernel>=6.19<7.0.7
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Initialize the adata->lock mutex in cros_typec_register_thunderbolt() so it is initialized before being acquired by cros_typec_altmode_work()
platform/chrome: cros_ec_typec adata->lock = initialized mutex
Event History
May 28, 2026
CVE Published
via MITRE·09:35 AM
Data Sourced
via MITRE·09:35 AM
Description
Data Sourced
via NVD·10:16 AM
RemedyDescriptionSeverityWeaknessAffected Software