In the Linux kernel, the following vulnerability has been resolved:

device property: initialize the remaining fields of fwnode_handle in fwnode_init()

If a firmware node is allocated on the stack (for instance: temporary
software node whose life-time we control) or on the heap - but using a
non-zeroing allocation function - and initialized using fwnode_init(),
its secondary pointer will contain uninitialized memory which likely
will be neither NULL nor IS_ERR() and so may end up being dereferenced
(for example: in dev_to_swnode()). Set fwnode->secondary to NULL on
initialization. While at it: initialize the remaining fields of struct
fwnode_handle too just to be sure.

[ Fix typo in commit message. - Danilo ]

https://git.kernel.org/stable/c/0198d579948322cda5178b9672d448375a32f947

https://git.kernel.org/stable/c/173b61c9276c7b3a5fbcc63ae7aafc897fee1e18

https://git.kernel.org/stable/c/7eba000621fff223dd7bab484d48918c7c77a307

https://git.kernel.org/stable/c/9c86a1f930bb2ddb85f867b4736716e82a4a4683

https://git.kernel.org/stable/c/c81e2af41de6a159837c7129a4fc444ac6e48046

https://git.kernel.org/stable/c/c8542b68ba6ef4f61072098893a3f5b71c569b6c

https://git.kernel.org/stable/c/f0b4e1cc8ad76baf49d898727eb52e91a4ef0544

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["include/linux/fwnode.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"01bb86b380a306bd937c96da36f66429f3362137","lessThan":"0198d579948322cda5178b9672d448375a32f947","versionType":"git","status":"affected"},{"version":"01bb86b380a306bd937c96da36f66429f3362137","lessThan":"173b61c9276c7b3a5fbcc63ae7aafc897fee1e18","versionType":"git","status":"affected"},{"version":"01bb86b380a306bd937c96da36f66429f3362137","lessThan":"f0b4e1cc8ad76baf49d898727eb52e91a4ef0544","versionType":"git","status":"affected"},{"version":"01bb86b380a306bd937c96da36f66429f3362137","lessThan":"c8542b68ba6ef4f61072098893a3f5b71c569b6c","versionType":"git","status":"affected"},{"version":"01bb86b380a306bd937c96da36f66429f3362137","lessThan":"9c86a1f930bb2ddb85f867b4736716e82a4a4683","versionType":"git","status":"affected"},{"version":"01bb86b380a306bd937c96da36f66429f3362137","lessThan":"c81e2af41de6a159837c7129a4fc444ac6e48046","versionType":"git","status":"affected"},{"version":"01bb86b380a306bd937c96da36f66429f3362137","lessThan":"7eba000621fff223dd7bab484d48918c7c77a307","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["include/linux/fwnode.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.11","status":"affected"},{"version":"0","lessThan":"5.11","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.96","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.39","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]