CVE-2026-23123

A flaw was found in the Linux kernel's interconnect debugfs test client. This vulnerability arises from the use of uninitialized pointers when handling debugfs entries. A local user with sufficient privileges could exploit this by accessing these debugfs entries. Successful exploitation could lead to a kernel crash, causing a local denial of service (DoS). There is also a theoretical risk of memory corruption.

The issue is in the interconnect debugfs test client. The debugfs_create_str API assumes that the backing pointer is either NULL or points to valid dynamically allocated memory. Before this change src_node and dst_node could be left uninitialized, meaning they might contain arbitrary stack or global garbage values. When the debugfs files are accessed, the debugfs str ing helpers may dereference the pointer to print the string, or may attempt to update it on write. With an uninitialized pointer this can lead to a kernel crash due to an invalid dereference, producing a local denial of service. Depending on the exact debugfs string implementation and write path behavior, there is also a more theoretical risk of memory corruption if the subsystem attempts to treat the garbage pointer as a valid allocation. Access requires local privileges sufficient to read or write the debugfs entries. In many deployments debugfs is restricted to root and may not be mounted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.