UBUNTU-CVE-2026-80751: High severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prevo in mtkmfgattachdev() mtkmfgattachdev() reads prevo on the first iteration of its loop, in "if (prevo && prevo->freq == o->freq)", before prevo is assigned at the end of the loop body. On that first iteration, evaluating prevo reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP. Initialize prevo to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration. Found with Clang's -Wconditional-uninitialized.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Initialize prev_o to NULL before the loop so the first iteration does not read an indeterminate value.
Linux kernel pmdomain: mediatek mfg prev_o initialization in mtk_mfg_attach_dev() = NULL