Use-After-Free Vulnerability in Linux Kernel Affecting FPGA Regions

CVE-2026-64249

What is CVE-2026-64249?

A use-after-free vulnerability was discovered in the Linux kernel's FPGA region management. This flaw occurs in the function 'child_regions_with_firmware()' where a reference to a freed memory region may be accessed after an error has been logged. To mitigate this issue, the location of the memory release operation has been adjusted to ensure that all error handling occurs before the memory is freed, eliminating the risk of referencing invalid memory during error printouts.

References