Linux Kernel UAF in fpga:child_regions_with_firmware()
CVE-2026-64249 Published on July 24, 2026
fpga: region: fix use-after-free in child_regions_with_firmware()
In the Linux kernel, the following vulnerability has been resolved:
fpga: region: fix use-after-free in child_regions_with_firmware()
Move of_node_put(child_region) after the error print to avoid accessing
freed memory when pr_err() references child_region.
[ Yilun: Fix the Fixes tag ]
Products Associated with CVE-2026-64249
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below e918942bcc5355ad5b44ba557935dffc0727b0eb is affected.
- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below 866184fc7ae42a0070f1141ae8c5dca7c24a59e2 is affected.
- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below 070b0ce947b18fa3dec0729695147f7e19599649 is affected.
- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below fbaf509ad7cb2f7dafe73ca20c956104cfcc9d68 is affected.
- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below e79afcb0a66d2b3c33e510eade902537e656fc00 is affected.
- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below 369496d885b4cf6e8647cf4dc5cf3ac68fdf37a1 is affected.
- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below 5e098e40e8bac43ed58645c10d5fad781966efe4 is affected.
- Version 0fa20cdfcc1f68847cdfc47824476301eedc8297 and below 54f3c5643ec523a04b6ec0e7c19eb10f5ebebdd3 is affected.
- Version 4.10 is affected.
- Before 4.10 is unaffected.
- Version 5.10.260, <= 5.10.* is unaffected.
- Version 5.15.211, <= 5.15.* is unaffected.
- Version 6.1.177, <= 6.1.* is unaffected.
- Version 6.6.144, <= 6.6.* is unaffected.
- Version 6.12.95, <= 6.12.* is unaffected.
- Version 6.18.38, <= 6.18.* is unaffected.
- Version 7.1.3, <= 7.1.* is unaffected.
- Version 7.2-rc1, <= * is unaffected.