Use-After-Free Vulnerability in Linux Kernel ACPI NFIT Component

CVE-2026-64510

What is CVE-2026-64510?

A significant vulnerability has been identified in the Linux kernel's ACPI NFIT component, leading to potential use-after-free conditions under certain circumstances. If the acpi_nfit_init() function fails while adding an acpi_desc object to the acpi_descs list, the corresponding object remains in the list, resulting in a dangling pointer on failure. Future calls invoking an ACPI Machine Check Exception may trigger nfit_handle_mce(), causing subsequent problems. This issue can also arise if compatibility checks are not properly implemented during the acpi_nfit_probe() process, potentially causing memory access violations during device removal. The fix involves ensuring proper cleanup through acpi_nfit_shutdown() for both successful and failed initialization scenarios, alongside additional nullity checks to prevent errant memory access.

References