CVE-2026-64165

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ARM: integrator: Fix early initialization<br /> <br /> Starting with commit bdb249fce9ad4 ("ARM: integrator: read counter using<br /> syscon/regmap"), intcp_init_early calls syscon_regmap_lookup_by_compatible<br /> which in turn calls of_syscon_register. This function allocates memory.<br /> Since the memory management code has not been initialized at that time,<br /> the call always fails. It either returns -ENOMEM or crashes as follows.<br /> <br /> Unable to handle kernel NULL pointer dereference at virtual address 0000000c when read<br /> [0000000c] *pgd=00000000<br /> Internal error: Oops: 5 [#1] ARM<br /> Modules linked in:<br /> CPU: 0 UID: 0 PID: 0 Comm: swapper Not tainted 6.15.0-rc5-00026-g5fcc9bf84ee5 #1 PREEMPT<br /> Hardware name: ARM Integrator/CP (Device Tree)<br /> PC is at __kmalloc_cache_noprof+0xec/0x39c<br /> LR is at __kmalloc_cache_noprof+0x34/0x39c<br /> ...<br /> Call trace:<br /> __kmalloc_cache_noprof from of_syscon_register+0x7c/0x310<br /> of_syscon_register from device_node_get_regmap+0xa4/0xb0<br /> device_node_get_regmap from intcp_init_early+0xc/0x40<br /> intcp_init_early from start_kernel+0x60/0x688<br /> start_kernel from 0x0<br /> <br /> The crash is seen due to a dereferenced pointer which is not supposed to be<br /> NULL but is NULL if the memory management subsystem has not been<br /> initialized. The crash is not seen with all versions of gcc. Some versions<br /> such as gcc 9.x apparently do not dereference the pointer, presumably if<br /> tracing is disabled. The problem has been reproduced with gcc 10.x, 11.x,<br /> and 13.x. Either case, if the crash is not seen, the call to<br /> syscon_regmap_lookup_by_compatible returns -ENOMEM, and<br /> sched_clock_register is never called.<br /> <br /> Fix the problem by moving the early initialization code into the standard<br /> machine initialization code.