Linux Kernel Vulnerability in ACPI's NFIT Device Handler

CVE-2026-64511

What is CVE-2026-64511?

A vulnerability in the Linux kernel's implementation of the ACPI NFIT device handler can lead to a NULL pointer dereference when the corresponding NFIT table is absent. This occurs if the platform's firmware triggers a notification for uncorrectable memory errors before validating the presence of the necessary NFIT table. To mitigate this issue, a check against NULL was added to prevent potential crashes or unintended behavior caused by dereferencing a NULL pointer.

References