CVE-2026-46134

kernel: platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's cros_ec_typec component. This vulnerability occurs because a mutex, a mechanism used to prevent simultaneous access to shared resources, was not properly initialized during Thunderbolt registration. This oversight can lead to a NULL dereference, potentially causing system instability or a denial of service (DoS) for affected systems.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-909 · Missing Initialization of Resource