CVE-2026-64511

Source
https://cve.org/CVERecord?id=CVE-2026-64511
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64511.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64511
Downstream
Published
2026-07-25T08:52:03.818Z
Modified
2026-07-27T04:03:22.729792338Z
Summary
ACPI: NFIT: core: Fix possible NULL pointer dereference
Details

In the Linux kernel, the following vulnerability has been resolved:

ACPI: NFIT: core: Fix possible NULL pointer dereference

After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpinfitprobe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpidesc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFITNOTIFYUCMEMORYERROR notification on the NFIT device at that point, acpinfitucerror_notify() will dereference a NULL pointer.

Prevent that from occurring by adding an acpidesc check against NULL to acpinfitucerror_notify().

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64511.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9b311b7313d6c104dd4a2d43ab54536dce07f960
Fixed
a44343fe230aa48c74ef09830f3c5c90848b257e
Fixed
3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6
Fixed
452945662fd8e9862a2d2043239c7ee1815d1ac4
Fixed
873576e585da5d0fc5debbab74eed565c0acea99
Fixed
027e128abb82788189d6d45b68e3e8e7329b67be

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64511.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.96
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.39
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64511.json"