CVE-2026-72008

A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter (HWV) type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performing power-off actions, potentially leading to a null pointer dereference. While not observed in practice, this issue could result in a kernel panic, causing a denial of service (DoS) to the system.

This vulnerability is rated as Moderate because exploitation is restricted to local systems utilizing specific MediaTek SoC hardware, limiting the potential impact to a local denial of service via a system crash without compromising confidentiality or data integrity. The flaw resides in a power management driver designed for specialized embedded platforms that are not utilized in standard enterprise deployments. Furthermore, the vulnerable code introduced in upstream kernels is not present in Red Hat Enterprise Linux releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.