CVE-2026-68461

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

HIGH
7.8
CVSS Score
Published: August 15, 2026 at 05:51 AM UTC
Updated: October 19, 2026 at 10:17 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields of fwnode_handle in fwnode_init() If a firmware node is allocated on the stack (for instance: temporary software node whose life-time we control) or on the heap - but using a non-zeroing allocation function - and initialized using fwnode_init(), its secondary pointer will contain uninitialized memory which likely will be neither NULL nor IS_ERR() and so may end up being dereferenced (for example: in dev_to_swnode()). Set fwnode->secondary to NULL on initialization. While at it: initialize the remaining fields of struct fwnode_handle too just to be sure. [ Fix typo in commit message. - Danilo ]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

01bb86b380a306bd937c96da36f66429f33621371bb86b380a306bd937c96da36f66429f33621375.11
Vendor states this is fixed in 0198d579948322cda5178b9672d448375a32f947 (fixed)
Vendor states this is fixed in 173b61c9276c7b3a5fbcc63ae7aafc897fee1e18 (fixed)
Vendor states this is fixed in 7eba000621fff223dd7bab484d48918c7c77a307 (fixed)
Vendor states this is fixed in 9c86a1f930bb2ddb85f867b4736716e82a4a4683 (fixed)
Vendor states this is fixed in c81e2af41de6a159837c7129a4fc444ac6e48046 (fixed)
Vendor states this is fixed in c8542b68ba6ef4f61072098893a3f5b71c569b6c (fixed)
Vendor states this is fixed in f0b4e1cc8ad76baf49d898727eb52e91a4ef0544 (fixed)
Vendor states this is fixed in 5.11 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.96 (unaffected)
Vendor states this is fixed in 6.18.39 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED
CWE
CWE-665

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card