U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-64220 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in fwnode_init() If a firmware node is allocated on the stack (for instance: temporary software node whose life-time we control) or on the heap - but using a non-zeroing allocation function - and initialized using fwnode_init(), its secondary pointer will contain uninitalized memory which likely will be neither NULL nor IS_ERR() and so may end up being dereferenced (for example: in dev_to_swnode()). Set fwnode->secondary to NULL on initialization.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/215c90ee656114f5e8c32408228d97082f8e0eef kernel.org
https://git.kernel.org/stable/c/34bf74b1fd2e4a44e27821a329204caf09df2976 kernel.org
https://git.kernel.org/stable/c/371f53925a6714d0aa35f1aefdffc3e8cd62f480 kernel.org
https://git.kernel.org/stable/c/3f1024deeab3b5443c29b3de4fe475e87309b8fa kernel.org
https://git.kernel.org/stable/c/508fd8ab158abd04b7f7d0f707cd6d6c405df4ea kernel.org
https://git.kernel.org/stable/c/f0e211d6539fae800217c10797993b7592d6ab01 kernel.org
https://git.kernel.org/stable/c/f59e686c778cb41b8f7aa8fab2afd6a01afb3d47 kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-64220
NVD Published Date:
07/24/2026
NVD Last Modified:
07/24/2026
Source:
kernel.org