CVE-2026-80750
Received Received - Intake

Linux Kernel pmdomain Mediatek Use-After-Free

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of_node_put() scpsys_get_bus_protection_legacy() looks up several legacy bus protection regmaps from device-tree nodes. Two error paths put the device node before checking whether the regmap lookup failed, but still pass that node to dev_err_probe() with %pOF on failure. If of_node_put() drops the last reference, the later %pOF formatting can dereference a freed device node. Keep the node reference until after the error message has been emitted in the infracfg and SMI lookup paths. Also drop the SMI node before returning when the SMI phandle is missing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-80750
EUVD
EUVD-2026-70354

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the MediaTek power domain (pmdomain) subsystem. It involves a use-after-free issue where device node references are improperly managed. Specifically, the function scpsys_get_bus_protection_legacy() fails to keep a device node reference until after error messages are processed, leading to potential dereferencing of freed memory when formatting error messages with %pOF.

Detection Guidance

This vulnerability is specific to the Linux kernel's Mediatek power domain handling. Detection requires checking kernel logs for errors related to device tree node dereferencing in the scpsys subsystem. Look for messages containing 'OF:' or 'scpsys' in dmesg or journalctl output.

Impact Analysis

This vulnerability could cause system instability or crashes if exploited. It may lead to kernel panics or unexpected behavior due to memory corruption when error paths are triggered. Systems using MediaTek chipsets with affected kernel versions are at risk.

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-80750. The patch addresses incorrect device node handling in Mediatek's power domain code. Check your distribution's security updates or kernel release notes for version numbers containing the fix.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80750. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart