CVE-2026-64511
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpi_nfit_probe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpi_desc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFIT_NOTIFY_UC_MEMORY_ERROR notification on the NFIT device at that point, acpi_nfit_uc_error_notify() will dereference a NULL pointer. Prevent that from occurring by adding an acpi_desc check against NULL to acpi_nfit_uc_error_notify().
How to fix
- Linux Linuxa44343fe230aa48c74ef09830f3c5c90848b257e, 3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6, 452945662fd8e9862a2d2043239c7ee1815d1ac4, 873576e585da5d0fc5debbab74eed565c0acea99, 027e128abb82788189d6d45b68e3e8e7329b67be or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9b311b7313d6c104dd4a2d43ab54536dce07f960 ≤ v < a44343fe230aa48c74ef09830f3c5c90848b257e, 9b311b7313d6c104dd4a2d43ab54536dce07f960 ≤ v < 3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6, 9b311b7313d6c104dd4a2d43ab54536dce07f960 ≤ v < 452945662fd8e9862a2d2043239c7ee1815d1ac4, 9b311b7313d6c104dd4a2d43ab54536dce07f960 ≤ v < 873576e585da5d0fc5debbab74eed565c0acea99, 9b311b7313d6c104dd4a2d43ab54536dce07f960 ≤ v < 027e128abb82788189d6d45b68e3e8e7329b67be, 6.6 | a44343fe230aa48c74ef09830f3c5c90848b257e, 3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6, 452945662fd8e9862a2d2043239c7ee1815d1ac4, 873576e585da5d0fc5debbab74eed565c0acea99, 027e128abb82788189d6d45b68e3e8e7329b67be |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.