Improper Initialization in Linux kernel - CVE-2026-80746
Published: September 4, 2026
Vulnerability identifier: #VU146941
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80746
CWE-ID: CWE-665
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause the display clock controller's root clock generator to stall while updating its configuration.
The vulnerability exists due to improper initialization in disp_cc_mdss_mdp_clk_src when probing the enabled Display Clock Controller on an Eliza EVK whose display is disabled. A local user can trigger controller initialization to cause the display clock controller's root clock generator to stall while updating its configuration.
The affected configuration references parent clocks from DSI PHYs.
Affected software
Linux kernel
How to mitigate CVE-2026-80746
Install security update from vendor's repository.