CVE-2026-46308

kernel: pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel, specifically within the pmdomain: mediatek component. An issue in the scpsys_get_bus_protection_legacy() function's error handling could lead to a use-after-free vulnerability. This occurs when memory is prematurely released before error checks are completed, which can result in system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-826 · Premature Release of Resource During Expected Lifetime