{"id":"CVE-2026-43335","state":"PUBLISHED","title":"interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ninterconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()\n\nThe change to dynamic IDs for SM8450 platform interconnects left two links\nunconverted, fix it to avoid the NULL pointer dereference in runtime,\nwhen a pointer to a destination interconnect is not valid:\n\n    Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008\n    <...>\n    Call trace:\n      icc_link_nodes+0x3c/0x100 (P)\n      qcom_icc_rpmh_probe+0x1b4/0x528\n      platform_probe+0x64/0xc0\n      really_probe+0xc4/0x2a8\n      __driver_probe_device+0x80/0x140\n      driver_probe_device+0x48/0x170\n      __device_attach_driver+0xc0/0x148\n      bus_for_each_drv+0x88/0xf0\n      __device_attach+0xb0/0x1c0\n      device_initial_probe+0x58/0x68\n      bus_probe_device+0x40/0xb8\n      deferred_probe_work_func+0x90/0xd0\n      process_one_work+0x15c/0x3c0\n      worker_thread+0x2e8/0x400\n      kthread+0x150/0x208\n      ret_from_fork+0x10/0x20\n     Code: 900310f4 911d6294 91008280 94176078 (f94002a0)\n     ---[ end trace 0000000000000000 ]---\n     Kernel panic - not syncing: Oops: Fatal exception","publishedAt":"2026-05-08T13:31:21.623Z","updatedAt":"2026-05-11T22:22:34.774Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"51513bec806fbe1cf9254baed97f115a480bbb53","status":"affected","lessThan":"77d22bf3fc5d1bcdee035979b07840c9c2ece8f2","versionType":"git"},{"version":"51513bec806fbe1cf9254baed97f115a480bbb53","status":"affected","lessThan":"dbbd550d7c8d90d3af9fe8a12a9caff077ddb8e3","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/interconnect/qcom/sm8450.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.19","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.19","versionType":"semver"},{"version":"6.19.12","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/interconnect/qcom/sm8450.c"]}],"references":["https://git.kernel.org/stable/c/77d22bf3fc5d1bcdee035979b07840c9c2ece8f2","https://git.kernel.org/stable/c/dbbd550d7c8d90d3af9fe8a12a9caff077ddb8e3"],"weaknesses":[],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/43xxx/CVE-2026-43335.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-43335","state":"PUBLISHED","datePublished":"2026-05-08T13:31:21.623Z","dateUpdated":"2026-05-11T22:22:34.774Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-05-01T14:12:56.002Z"},"containers":{"cna":{"title":"interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ninterconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes()\n\nThe change to dynamic IDs for SM8450 platform interconnects left two links\nunconverted, fix it to avoid the NULL pointer dereference in runtime,\nwhen a pointer to a destination interconnect is not valid:\n\n    Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008\n    <...>\n    Call trace:\n      icc_link_nodes+0x3c/0x100 (P)\n      qcom_icc_rpmh_probe+0x1b4/0x528\n      platform_probe+0x64/0xc0\n      really_probe+0xc4/0x2a8\n      __driver_probe_device+0x80/0x140\n      driver_probe_device+0x48/0x170\n      __device_attach_driver+0xc0/0x148\n      bus_for_each_drv+0x88/0xf0\n      __device_attach+0xb0/0x1c0\n      device_initial_probe+0x58/0x68\n      bus_probe_device+0x40/0xb8\n      deferred_probe_work_func+0x90/0xd0\n      process_one_work+0x15c/0x3c0\n      worker_thread+0x2e8/0x400\n      kthread+0x150/0x208\n      ret_from_fork+0x10/0x20\n     Code: 900310f4 911d6294 91008280 94176078 (f94002a0)\n     ---[ end trace 0000000000000000 ]---\n     Kernel panic - not syncing: Oops: Fatal exception"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"51513bec806fbe1cf9254baed97f115a480bbb53","status":"affected","lessThan":"77d22bf3fc5d1bcdee035979b07840c9c2ece8f2","versionType":"git"},{"version":"51513bec806fbe1cf9254baed97f115a480bbb53","status":"affected","lessThan":"dbbd550d7c8d90d3af9fe8a12a9caff077ddb8e3","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/interconnect/qcom/sm8450.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.19","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.19","versionType":"semver"},{"version":"6.19.12","status":"unaffected","lessThanOrEqual":"6.19.*","versionType":"semver"},{"version":"7.0","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/interconnect/qcom/sm8450.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/77d22bf3fc5d1bcdee035979b07840c9c2ece8f2"},{"url":"https://git.kernel.org/stable/c/dbbd550d7c8d90d3af9fe8a12a9caff077ddb8e3"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T22:22:34.774Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.19","versionEndExcluding":"6.19.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.19","versionEndExcluding":"7.0"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}