Memory Management Issue in Linux Kernel ARM Integrator

CVE-2026-64165

What is CVE-2026-64165?

A vulnerability exists in the ARM Integrator within the Linux kernel due to improper handling of memory allocation during early initialization. The failure to initialize the memory management code can lead to a crash or unexpected behavior. This occurs when the 'intcp_init_early' function calls 'syscon_regmap_lookup_by_compatible', which may return an error or dereference a null pointer, resulting in a kernel panic. The issue is exacerbated on certain compiler versions (i.e., GCC 10.x, 11.x, 13.x), where it can lead to system instability. This vulnerability underscores the importance of proper early setup in system initialization to prevent such crashes.

References