CVE-2026-23123
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/02/2026
Last modified:
14/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
interconnect: debugfs: initialize src_node and dst_node to empty strings<br />
<br />
The debugfs_create_str() API assumes that the string pointer is either NULL<br />
or points to valid kmalloc() memory. Leaving the pointer uninitialized can<br />
cause problems.<br />
<br />
Initialize src_node and dst_node to empty strings before creating the<br />
debugfs entries to guarantee that reads and writes are safe.



