In the Linux kernel, the following vulnerability has been resolved:
interconnect: debugfs: initialize srcnode and dstnode to empty strings
The debugfscreatestr() API assumes that the string pointer is either NULL or points to valid kmalloc() memory. Leaving the pointer uninitialized can cause problems.
Initialize srcnode and dstnode to empty strings before creating the debugfs entries to guarantee that reads and writes are safe.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23123.json",
"cna_assigner": "Linux"
}