{"id":"CVE-2026-64220","title":"device property: set fwnode->secondary to NULL in fwnode_init()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndevice property: set fwnode->secondary to NULL in fwnode_init()\n\nIf a firmware node is allocated on the stack (for instance: temporary\nsoftware node whose life-time we …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < f0e211d6539fae800217c10797993b7592d6ab01","Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 3f1024deeab3b5443c29b3de4fe475e87309b8fa","Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 371f53925a6714d0aa35f1aefdffc3e8cd62f480","Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 34bf74b1fd2e4a44e27821a329204caf09df2976","Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 508fd8ab158abd04b7f7d0f707cd6d6c405df4ea","Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < f59e686c778cb41b8f7aa8fab2afd6a01afb3d47","Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 215c90ee656114f5e8c32408228d97082f8e0eef","Linux 5.11"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:32:20.807519Z"},"published":"2026-07-24","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:34:30.235Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64220","references":[{"url":"https://git.kernel.org/stable/c/f0e211d6539fae800217c10797993b7592d6ab01"},{"url":"https://git.kernel.org/stable/c/3f1024deeab3b5443c29b3de4fe475e87309b8fa"},{"url":"https://git.kernel.org/stable/c/371f53925a6714d0aa35f1aefdffc3e8cd62f480"},{"url":"https://git.kernel.org/stable/c/34bf74b1fd2e4a44e27821a329204caf09df2976"},{"url":"https://git.kernel.org/stable/c/508fd8ab158abd04b7f7d0f707cd6d6c405df4ea"},{"url":"https://git.kernel.org/stable/c/f59e686c778cb41b8f7aa8fab2afd6a01afb3d47"},{"url":"https://git.kernel.org/stable/c/215c90ee656114f5e8c32408228d97082f8e0eef"}],"tags":["cve.org"],"epss":0.00123,"epssPercentile":0.02082,"ingestedAt":"2026-11-06T16:57:43.219Z","slug":"CVE-2026-64220","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndevice property: set fwnode->secondary to NULL in fwnode_init()\n\nIf a firmware node is allocated on the stack (for instance: temporary\nsoftware node whose life-time we control) or on the heap - but using a\nnon-zeroing allocation function - and initialized using fwnode_init(),\nits secondary pointer will contain uninitalized memory which likely will\nbe neither NULL nor IS_ERR() and so may end up being dereferenced (for\nexample: in dev_to_swnode()). Set fwnode->secondary to NULL on\ninitialization.\n\n## Affected\n\n- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < f0e211d6539fae800217c10797993b7592d6ab01`\n- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 3f1024deeab3b5443c29b3de4fe475e87309b8fa`\n- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 371f53925a6714d0aa35f1aefdffc3e8cd62f480`\n- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 34bf74b1fd2e4a44e27821a329204caf09df2976`\n- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 508fd8ab158abd04b7f7d0f707cd6d6c405df4ea`\n- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < f59e686c778cb41b8f7aa8fab2afd6a01afb3d47`\n- `Linux >= 01bb86b380a306bd937c96da36f66429f3362137 < 215c90ee656114f5e8c32408228d97082f8e0eef`\n- `Linux 5.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}