CVE-2026-64220

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fwnode init() function where the secondary pointer of a firmware node is not properly initialized. When a firmware node is allocated on the stack or on the heap using a non-zeroing allocation function, the secondary pointer contains uninitialized memory. This can lead to the pointer being dereferenced in functions such as dev to swnode(), potentially causing system instability or crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.