SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-64249

HIGH · CVSS 7.8 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-07-24 · Last synced 2026-08-23

CyberRota Analysis

AI-Generated

A use-after-free vulnerability exists in the Linux kernel's FPGA region handling, specifically in the `child_regions_with_firmware()` function. This flaw could lead to accessing freed memory, potentially resulting in system instability or exploitation. Organizations using affected Linux distributions should prioritize patching this vulnerability to mitigate risks associated with memory access violations.

CVE
CVE-2026-64249
Severity
HIGH
CVSS
7.8
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_with_firmware() Move of_node_put(child_region) after the error print to avoid accessing freed memory when pr_err() references child_region. [ Yilun: Fix the Fixes tag ]

Related CVEs

Other vulnerabilities affecting the same vendor(s)