CVE-2026-64220

The CVE-2026-64220 issue in the Linux kernel affects firmware nodes initialized via fwnode_init. If a firmware node is allocated on the stack or heap with a non-zeroing allocator, its fwnode->secondary may contain uninitialized memory instead of NULL or IS_ERR(), risking dereference (e.g., in ...

PT-2026-64335

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-secondary to NULL in fwnode init If a firmware node is allocated on the stack for instance: temporary software node whose life-time we control or on the heap - but using a non-zeroing allocation functi...