NULL Pointer Dereference in Linux Kernel Affecting WPCM-FIU

CVE-2026-46261

What is CVE-2026-46261?

A vulnerability exists in the Linux kernel related to the WPCM-FIU, where the function platform_get_resource_byname() may return a NULL value. This could lead to a NULL pointer dereference when this pointer is passed to resource_size(), potentially causing a system crash. The fix involves moving the assignment of fiu->memory_size to occur after performing an error check on devm_ioremap_resource(), ensuring that such dereferences are handled safely.

References