SECUFOCUSNOW
Home›CVE index›CVE-2026-64510
Review reviewHigh

CVE-2026-64510

Linux

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_init() fails after adding the acpi_desc object to the acpi_descs list, that object is never removed from that list because the acpi_nfit_shutdown() devm action is not added for the NFIT device in that case. Next, the acpi_nfit_init() failure causes acpi_nfit_probe() to fail, the acpi_desc object is freed, and a dangling pointer is left behind in the acpi_descs. Any subsequent ACPI Machine Check Exception will trigger nfit_handle_mce() which iterates over acpi...

CVSS
7
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.25
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_init() fails after adding the acpi_desc object to the acpi_descs list, that object is never removed from that list because the acpi_nfit_shutdown() devm action is not added for the NFIT device in that case. Next, the acpi_nfit_init() failure causes acpi_nfit_probe() to fail, the acpi_desc object is freed, and a dangling pointer is left behind in the acpi_descs. Any subsequent ACPI Machine Check Exception will trigger nfit_handle_mce() which iterates over acpi...

Affected product and versions

Product
Linux
Affected versions
>= a61fe6f7902ecaa89d5e6c709490fc4324927134 < ee82078e776ae31266cc70fdf62ac17c3c6f100a, >= a61fe6f7902ecaa89d5e6c709490fc4324927134 < 6ff054cc02a763914773b026cacb429e5fbf64fa, >= a61fe6f7902ecaa89d5e6c709490fc4324927134 < b07d22a2d17ad6465c87bd5752bc70e4c16e0ee4, >= a61fe6f7902ecaa89d5e6c709490fc4324927134 < c127dbd832bd4b9aef8a749d9f491b74042f9b47, >= a61fe6f7902ecaa89d5e6c709490fc4324927134 < df7c92216a1583a76cb0cbf2f21cd68870609b05, >= a61fe6f7902ecaa89d5e6c709490fc4324927134 < 3b2628f7682aea8d9ce09ad4b9a3bd144b451eaa, >= a61fe6f7902ecaa89d5e6c709490fc4324927134 < 7d69235bdc581a4346e9bcd6a8bea37d3e1abd25, >= a61fe6f7902ecaa89d5e6c709490fc4324927134 < 38bf27511ef41bffebd157ec3eba41fc89ba59cd, >= 4.6
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available