CVE-2026-80750

CVE-2026-80750 is a use-after-free in the Linux kernel's MediaTek power domain (pmdomain) driver. In scpsys_get_bus_protection_legacy(), two error paths release a device-tree node via of_node_put() before calling dev_err_probe(), which formats that same node using %pOF; if the released reference was the last one, the error message dereferences freed memory. The bug is triggered on MediaTek SoCs that use the legacy bus-protection power domain code when the infracfg or SMI regmap device-tree lookup fails during driver probe. A hit on this path can cause kernel memory corruption, a crash, or undefined behavior (CVSS 3.1: 8.4 High, with high confidentiality, integrity, and availability impact). There is no known public PoC, it is not on the CISA KEV list, and EPSS estimates only a 0.2% chance of exploitation within 30 days.

What to do: Apply the fix when your distribution's stable kernels pick up the mainline pmdomain/mediatek patch for CVE-2026-80750; fixed version numbers are not provided in the source data, so track vendor or distro advisories. Impact is limited to devices running Linux on MediaTek SoCs that use the legacy bus-protection path, so servers, desktops, and non-MediaTek devices are unaffected. Given no known exploitation, routine kernel maintenance is sufficient, though you can check boot logs for SCP power-domain probe errors as an indicator of exposure.