HomeDefectsLIN1022-29238
Acknowledged

LIN1022-29238 : Security Advisory - linux - CVE-2026-64220

Created: Aug 1, 2026    Updated: Aug 11, 2026
Found In Version: 10.22.33.2
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode->secondary to NULL in fwnode_init()  If a firmware node is allocated on the stack (for instance: temporary software node whose life-time we control) or on the heap - but using a non-zeroing allocation function - and initialized using fwnode_init(), its secondary pointer will contain uninitalized memory which likely will be neither NULL nor IS_ERR() and so may end up being dereferenced (for example: in dev_to_swnode()). Set fwnode->secondary to NULL on initialization.