CVE-2026-64220

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> device property: set fwnode-&gt;secondary to NULL in fwnode_init()<br /> <br /> If a firmware node is allocated on the stack (for instance: temporary<br /> software node whose life-time we control) or on the heap - but using a<br /> non-zeroing allocation function - and initialized using fwnode_init(),<br /> its secondary pointer will contain uninitalized memory which likely will<br /> be neither NULL nor IS_ERR() and so may end up being dereferenced (for<br /> example: in dev_to_swnode()). Set fwnode-&gt;secondary to NULL on<br /> initialization.