In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: crosectypec: Init mutex in Thunderbolt registration
crostypecregisterthunderbolt() missed initializing the adata->lock
mutex. This leads to a NULL dereference when the mutex is later
acquired (e.g. in crostypecaltmodework()).
Initialize the mutex in crostypecregister_thunderbolt() to fix the issue.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46134.json"
}