CVE-2026-80750

CVE-2026-80750 affects the Linux kernel 's MediaTek pmdomain (power management domain) driver. The vulnerable function scpsys_get_bus_protection_legacy() contains a use-after-free bug: two error paths call of_node_put() on a device node before checking whether the regmap lookup failed, then pass ...

CVE-2026-80750 pmdomain: mediatek: fix remaining %pOF after of_node_put()

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after ofnodeput scpsysgetbusprotectionlegacy looks up several legacy bus protection regmaps from device-tree nodes. Two error paths put the device node before checking whether the regmap...

CVE-2026-72008

A flaw was found in the pmdomain: mediatek driver of the Linux kernel. This vulnerability occurs due to incorrect handling of Hardware Voter HWV type power domains during cleanup and power-on checks. Specifically, the driver might use inappropriate functions for checking power status and performi...