CVE-2026-64249

fpga: region: fix use-after-free in child_regions_with_firmware()

State: Published
Severity: Not scored
Published: Jul 24, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fpga: region: fix use-after-free in child_regions_with_firmware()

Move of_node_put(child_region) after the error print to avoid accessing freed memory when pr_err() references child_region.

[ Yilun: Fix the Fixes tag ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0fa20cdfcc1f68847cdfc47824476301eedc8297 to before e918942bcc5355ad5b44ba557935dffc0727b0ebAffected 0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 866184fc7ae42a0070f1141ae8c5dca7c24a59e2Affected 0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 070b0ce947b18fa3dec0729695147f7e19599649Affected 0fa20cdfcc1f68847cdfc47824476301eedc8297 to before fbaf509ad7cb2f7dafe73ca20c956104cfcc9d68Affected 0fa20cdfcc1f68847cdfc47824476301eedc8297 to before e79afcb0a66d2b3c33e510eade902537e656fc00Affected 0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 369496d885b4cf6e8647cf4dc5cf3ac68fdf37a1Affected 0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 5e098e40e8bac43ed58645c10d5fad781966efe4Affected 0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 54f3c5643ec523a04b6ec0e7c19eb10f5ebebdd3Affected
LinuxLinux	4.10Affected before 4.10Not affected 5.10.260 through 5.10.Not affected 5.15.211 through 5.15.Not affected 6.1.177 through 6.1.Not affected 6.6.144 through 6.6.Not affected 6.12.95 through 6.12.Not affected 6.18.38 through 6.18.Not affected 7.1.3 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

0fa20cdfcc1f68847cdfc47824476301eedc8297 to before e918942bcc5355ad5b44ba557935dffc0727b0ebAffected
0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 866184fc7ae42a0070f1141ae8c5dca7c24a59e2Affected
0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 070b0ce947b18fa3dec0729695147f7e19599649Affected
0fa20cdfcc1f68847cdfc47824476301eedc8297 to before fbaf509ad7cb2f7dafe73ca20c956104cfcc9d68Affected
0fa20cdfcc1f68847cdfc47824476301eedc8297 to before e79afcb0a66d2b3c33e510eade902537e656fc00Affected
0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 369496d885b4cf6e8647cf4dc5cf3ac68fdf37a1Affected
0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 5e098e40e8bac43ed58645c10d5fad781966efe4Affected
0fa20cdfcc1f68847cdfc47824476301eedc8297 to before 54f3c5643ec523a04b6ec0e7c19eb10f5ebebdd3Affected

LinuxLinux

4.10Affected
before 4.10Not affected
5.10.260 through 5.10.*Not affected
5.15.211 through 5.15.*Not affected
6.1.177 through 6.1.*Not affected
6.6.144 through 6.6.*Not affected
6.12.95 through 6.12.*Not affected
6.18.38 through 6.18.*Not affected
7.1.3 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.