7.8

CVE-2026-68461

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

In the Linux kernel, the following vulnerability has been resolved:

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

If a firmware node is allocated on the stack (for instance: temporary
software node whose life-time we control) or on the heap - but using a
non-zeroing allocation function - and initialized using fwnode_init(),
its secondary pointer will contain uninitialized memory which likely
will be neither NULL nor IS_ERR() and so may end up being dereferenced
(for example: in dev_to_swnode()). Set fwnode->secondary to NULL on
initialization. While at it: initialize the remaining fields of struct
fwnode_handle too just to be sure.

[ Fix typo in commit message. - Danilo ]
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 01bb86b380a306bd937c96da36f66429f3362137
Version < 0198d579948322cda5178b9672d448375a32f947
Status affected
Version 01bb86b380a306bd937c96da36f66429f3362137
Version < 173b61c9276c7b3a5fbcc63ae7aafc897fee1e18
Status affected
Version 01bb86b380a306bd937c96da36f66429f3362137
Version < f0b4e1cc8ad76baf49d898727eb52e91a4ef0544
Status affected
Version 01bb86b380a306bd937c96da36f66429f3362137
Version < c8542b68ba6ef4f61072098893a3f5b71c569b6c
Status affected
Version 01bb86b380a306bd937c96da36f66429f3362137
Version < 9c86a1f930bb2ddb85f867b4736716e82a4a4683
Status affected
Version 01bb86b380a306bd937c96da36f66429f3362137
Version < c81e2af41de6a159837c7129a4fc444ac6e48046
Status affected
Version 01bb86b380a306bd937c96da36f66429f3362137
Version < 7eba000621fff223dd7bab484d48918c7c77a307
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.11
Status affected
Version 0
Version < 5.11
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.03
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0198d579948322cda5178b9672d448375a32f947
https://git.kernel.org/stable/c/173b61c9276c7b3a5fbcc63ae7aafc897fee1e18
https://git.kernel.org/stable/c/f0b4e1cc8ad76baf49d898727eb52e91a4ef0544
https://git.kernel.org/stable/c/c8542b68ba6ef4f61072098893a3f5b71c569b6c
https://git.kernel.org/stable/c/9c86a1f930bb2ddb85f867b4736716e82a4a4683
https://git.kernel.org/stable/c/c81e2af41de6a159837c7129a4fc444ac6e48046
https://git.kernel.org/stable/c/7eba000621fff223dd7bab484d48918c7c77a307