Memory Management Issue in MediaTek Products

CVE-2026-80751

What is CVE-2026-80751?

A vulnerability in MediaTek's implementation within the Linux kernel causes potential issues due to uninitialized memory during the initialization of device attachment. In the function mtk_mfg_attach_dev(), an uninitialized pointer, prev_o, is read before being properly assigned, which may lead to dereferencing stale or invalid memory. This can result in application faults or erroneous behavior during the first iteration of frequency comparison. Proper initialization of prev_o to NULL rectifies this issue, ensuring safe and predictable execution.

References