CVE-2026-80751
Received Received - Intake

Linux kernel Memory Corruption in MediaTek MFG Power Domain

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev() mtk_mfg_attach_dev() reads prev_o on the first iteration of its loop, in "if (prev_o && prev_o->freq == o->freq)", before prev_o is assigned at the end of the loop body. On that first iteration, evaluating prev_o reads an indeterminate value. If it is non-NULL, the condition dereferences a stale or invalid pointer, potentially faulting or incorrectly skipping the first OPP. Initialize prev_o to NULL. This matches the intent as well: there is no previous OPP to compare against on the first iteration. Found with Clang's -Wconditional-uninitialized.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-80751
EUVD
EUVD-2026-70355

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the MediaTek power management domain code. The function mtk_mfg_attach_dev() reads an uninitialized pointer variable prev_o during its first loop iteration before it is assigned a value. This can lead to reading a random memory value, potentially causing crashes or incorrect behavior by skipping the first OPP (Operating Performance Point).

Detection Guidance

This vulnerability is specific to the Linux kernel's Mediatek MFG power domain driver and does not have network detection methods. It requires kernel code inspection or runtime analysis. Check kernel logs for crashes or warnings related to mtk_mfg_attach_dev(). Use 'dmesg | grep mtk_mfg' to inspect driver behavior.

Impact Analysis

If exploited, this could cause system instability such as crashes or unexpected behavior in MediaTek-based devices using the affected kernel code. It may lead to incorrect power management decisions affecting performance or battery life.

Mitigation Strategies

Apply the latest Linux kernel patches that include the fix for CVE-2026-80751. If using a Mediatek-based system, update to a kernel version where mtk_mfg_attach_dev() initializes prev_o to NULL. Monitor system stability after updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80751. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart