CVE-2026-43160

mfd: macsmc: Initialize mutex

MEDIUM
5.5
CVSS Score
Published: May 6, 2026 at 11:27 AM UTC
Updated: June 17, 2026 at 10:49 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: macsmc: Initialize mutex Initialize struct apple_smc's mutex in apple_smc_probe(). Using the mutex uninitialized surprisingly resulted only in occasional NULL pointer dereferences in apple_smc_read() calls from the probe() functions of sub devices.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.17 ≤ v < 6.18.166.17 ≤ v < 6.19.66.17 ≤ v < 7.06.19 ≤ v < 6.19.66.17e038d985c9823a12cd64fa077d0c5aca2c644b67
Vendor states this is fixed in 2d5932588f029f7787f52c29174fead9bbc6b2cf (fixed)
Vendor states this is fixed in 414f65d6736342c77d4ec5e7373039f4a09250dd (fixed)
Vendor states this is fixed in a1e9e299c0d9ea42ab1067b39fb72e976d3f1bdb (fixed)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.18.16 (unaffected)
Vendor states this is fixed in 6.19.6 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-908

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card