Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23123

interconnect: debugfs: initialize src_node and dst_node to empty strings

Description

In the Linux kernel, the following vulnerability has been resolved: interconnect: debugfs: initialize src_node and dst_node to empty strings The debugfs_create_str() API assumes that the string pointer is either NULL or points to valid kmalloc() memory. Leaving the pointer uninitialized can cause problems. Initialize src_node and dst_node to empty strings before creating the debugfs entries to guarantee that reads and writes are safe.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 770c69f037c18cfaa37c3d6c6ef8bd257635513f to < aa79a5a959c7c414bd6fba01ea8dbaddd44f13e7affected
  • 770c69f037c18cfaa37c3d6c6ef8bd257635513f to < 935d0938b570589c8b0a1733d2cba3c39d027f25affected
  • 770c69f037c18cfaa37c3d6c6ef8bd257635513f to < 5d7c7e1fb3ec24fdd0f9faa27b666d6789e891e8affected
  • 770c69f037c18cfaa37c3d6c6ef8bd257635513f to < 8cc27f5c6dd17dd090f3a696683f04336c162ff5affected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 6.6.122 to ≤ 6.6.*unaffected
  • 6.12.68 to ≤ 6.12.*unaffected
  • 6.18.8 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References