CVE-2026-64511

ACPI: NFIT: core: Fix possible NULL pointer dereference

State: Published
Severity: Not scored
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: NFIT: core: Fix possible NULL pointer dereference

After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpi_nfit_probe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpi_desc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFIT_NOTIFY_UC_MEMORY_ERROR notification on the NFIT device at that point, acpi_nfit_uc_error_notify() will dereference a NULL pointer.

Prevent that from occurring by adding an acpi_desc check against NULL to acpi_nfit_uc_error_notify().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9b311b7313d6c104dd4a2d43ab54536dce07f960 to before a44343fe230aa48c74ef09830f3c5c90848b257eAffected 9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6Affected 9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 452945662fd8e9862a2d2043239c7ee1815d1ac4Affected 9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 873576e585da5d0fc5debbab74eed565c0acea99Affected 9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 027e128abb82788189d6d45b68e3e8e7329b67beAffected
LinuxLinux	6.6Affected before 6.6Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

9b311b7313d6c104dd4a2d43ab54536dce07f960 to before a44343fe230aa48c74ef09830f3c5c90848b257eAffected
9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6Affected
9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 452945662fd8e9862a2d2043239c7ee1815d1ac4Affected
9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 873576e585da5d0fc5debbab74eed565c0acea99Affected
9b311b7313d6c104dd4a2d43ab54536dce07f960 to before 027e128abb82788189d6d45b68e3e8e7329b67beAffected

LinuxLinux

6.6Affected
before 6.6Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.