---
id: CVE-2026-68461
title: >-
  device property: initialize the remaining fields of fwnode_handle in
  fwnode_init()
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  device property: initialize the remaining fields of fwnode_handle in
  fwnode_init()


  If a firmware node is allocated on the stack (for instance: temporary

  software node …
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 01bb86b380a306bd937c96da36f66429f3362137 <
    0198d579948322cda5178b9672d448375a32f947
  - >-
    Linux >= 01bb86b380a306bd937c96da36f66429f3362137 <
    173b61c9276c7b3a5fbcc63ae7aafc897fee1e18
  - >-
    Linux >= 01bb86b380a306bd937c96da36f66429f3362137 <
    f0b4e1cc8ad76baf49d898727eb52e91a4ef0544
  - >-
    Linux >= 01bb86b380a306bd937c96da36f66429f3362137 <
    c8542b68ba6ef4f61072098893a3f5b71c569b6c
  - >-
    Linux >= 01bb86b380a306bd937c96da36f66429f3362137 <
    9c86a1f930bb2ddb85f867b4736716e82a4a4683
  - >-
    Linux >= 01bb86b380a306bd937c96da36f66429f3362137 <
    c81e2af41de6a159837c7129a4fc444ac6e48046
  - >-
    Linux >= 01bb86b380a306bd937c96da36f66429f3362137 <
    7eba000621fff223dd7bab484d48918c7c77a307
  - Linux 5.11
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:49:26.630961Z'
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:53:14.716Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-68461'
references:
  - url: 'https://git.kernel.org/stable/c/0198d579948322cda5178b9672d448375a32f947'
  - url: 'https://git.kernel.org/stable/c/173b61c9276c7b3a5fbcc63ae7aafc897fee1e18'
  - url: 'https://git.kernel.org/stable/c/f0b4e1cc8ad76baf49d898727eb52e91a4ef0544'
  - url: 'https://git.kernel.org/stable/c/c8542b68ba6ef4f61072098893a3f5b71c569b6c'
  - url: 'https://git.kernel.org/stable/c/9c86a1f930bb2ddb85f867b4736716e82a4a4683'
  - url: 'https://git.kernel.org/stable/c/c81e2af41de6a159837c7129a4fc444ac6e48046'
  - url: 'https://git.kernel.org/stable/c/7eba000621fff223dd7bab484d48918c7c77a307'
tags:
  - cve.org
epss: 0.00176
epssPercentile: 0.06639
ingestedAt: '2026-10-16T17:24:46.869Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

If a firmware node is allocated on the stack (for instance: temporary
software node whose life-time we control) or on the heap - but using a
non-zeroing allocation function - and initialized using fwnode_init(),
its secondary pointer will contain uninitialized memory which likely
will be neither NULL nor IS_ERR() and so may end up being dereferenced
(for example: in dev_to_swnode()). Set fwnode->secondary to NULL on
initialization. While at it: initialize the remaining fields of struct
fwnode_handle too just to be sure.

[ Fix typo in commit message. - Danilo ]

## Affected

- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 0198d579948322cda5178b9672d448375a32f947`
- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 173b61c9276c7b3a5fbcc63ae7aafc897fee1e18`
- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < f0b4e1cc8ad76baf49d898727eb52e91a4ef0544`
- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < c8542b68ba6ef4f61072098893a3f5b71c569b6c`
- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 9c86a1f930bb2ddb85f867b4736716e82a4a4683`
- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < c81e2af41de6a159837c7129a4fc444ac6e48046`
- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 7eba000621fff223dd7bab484d48918c7c77a307`
- `Linux 5.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.