Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64220

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/07/2026
Última modificación:
30/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> device property: set fwnode-&gt;secondary to NULL in fwnode_init()<br /> <br /> If a firmware node is allocated on the stack (for instance: temporary<br /> software node whose life-time we control) or on the heap - but using a<br /> non-zeroing allocation function - and initialized using fwnode_init(),<br /> its secondary pointer will contain uninitalized memory which likely will<br /> be neither NULL nor IS_ERR() and so may end up being dereferenced (for<br /> example: in dev_to_swnode()). Set fwnode-&gt;secondary to NULL on<br /> initialization.

Impacto