PT-2026-64732 · Linux · Linux

CVE-2026-64511 · Published 2026-07-25 · Updated 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

ACPI: NFIT: core: Fix possible NULL pointer dereference

After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpi nfit probe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpi desc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFIT NOTIFY UC MEMORY ERROR notification on the NFIT device at that point, acpi nfit uc error notify() will dereference a NULL pointer.

Prevent that from occurring by adding an acpi desc check against NULL to acpi nfit uc error notify().

Related Identifiers

CVE-2026-64511

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-64511 · Security Note
• https://git.kernel.org/stable/c/027e128abb82788189d6d45b68e3e8e7329b67be · Note
• https://git.kernel.org/stable/c/3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6 · Note
• https://git.kernel.org/stable/c/452945662fd8e9862a2d2043239c7ee1815d1ac4 · Note
• https://git.kernel.org/stable/c/a44343fe230aa48c74ef09830f3c5c90848b257e · Note
• https://git.kernel.org/stable/c/873576e585da5d0fc5debbab74eed565c0acea99 · Note