Answer in brief
CVE-2026-64511 records a Unknown severity vulnerability in ACPI: NFIT: core: Fix possible NULL pointer dereference. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <a44343fe230aa48c74ef09830f3c5c90848b257e || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6 || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <452945662fd8e9862a2d2043239c7ee1815d1ac4 || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <873576e585da5d0fc5debbab74eed565c0acea99 || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <027e128abb82788189d6d45b68e3e8e7329b67be | a44343fe230aa48c74ef09830f3c5c90848b257e, 3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6, 452945662fd8e9862a2d2043239c7ee1815d1ac4, 873576e585da5d0fc5debbab74eed565c0acea99, 027e128abb82788189d6d45b68e3e8e7329b67be |
| Linux/Linuxgeneric | 6.6 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 17, 2026
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpi_nfit_probe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpi_desc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFIT_NOTIFY_UC_MEMORY_ERROR notification on the NFIT device at that point, acpi_nfit_uc_error_notify() will dereference a NULL pointer. Prevent that from occurring by adding an acpi_desc check against NULL to acpi_nfit_uc_error_notify().
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-64511 records a Unknown severity vulnerability in ACPI: NFIT: core: Fix possible NULL pointer dereference. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <a44343fe230aa48c74ef09830f3c5c90848b257e || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6 || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <452945662fd8e9862a2d2043239c7ee1815d1ac4 || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <873576e585da5d0fc5debbab74eed565c0acea99 || >=9b311b7313d6c104dd4a2d43ab54536dce07f960 <027e128abb82788189d6d45b68e3e8e7329b67be | a44343fe230aa48c74ef09830f3c5c90848b257e, 3c8f73b0fbdf956c98e2329d5aaea3ad09a9cfb6, 452945662fd8e9862a2d2043239c7ee1815d1ac4, 873576e585da5d0fc5debbab74eed565c0acea99, 027e128abb82788189d6d45b68e3e8e7329b67be |
| Linux/Linuxgeneric | 6.6 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 17, 2026
In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference After commit 9b311b7313d6 ("ACPI: NFIT: Install Notify() handler before getting NFIT table"), acpi_nfit_probe() installs an ACPI notify handler for the NFIT device before checking the presence of the NFIT table. If that table is not there, 0 is returned without allocating the acpi_desc object and setting the driver data pointer of the NFIT device. If the platform firmware triggers an NFIT_NOTIFY_UC_MEMORY_ERROR notification on the NFIT device at that point, acpi_nfit_uc_error_notify() will dereference a NULL pointer. Prevent that from occurring by adding an acpi_desc check against NULL to acpi_nfit_uc_error_notify().
Quoted source text, attributed separately from HOL analysis.