In the Linux kernel, the following vulnerability has been resolved:
ACPI: NFIT: core: Fix possible NULL pointer dereference
After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpinfitprobe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpidesc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFITNOTIFYUCMEMORYERROR notification on the NFIT device at that point, acpinfitucerror_notify() will dereference a NULL pointer.
Prevent that from occurring by adding an acpidesc check against NULL to acpinfitucerror_notify().
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64511.json",
"cna_assigner": "Linux"
}