In the Linux kernel, the following vulnerability has been resolved:
device property: set fwnode->secondary to NULL in fwnode_init()
If a firmware node is allocated on the stack (for instance: temporary software node whose life-time we control) or on the heap - but using a non-zeroing allocation function - and initialized using fwnode_init(), its secondary pointer will contain uninitalized memory which likely will be neither NULL nor IS_ERR() and so may end up being dereferenced (for example: in dev_to_swnode()). Set fwnode->secondary to NULL on initialization.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf | Aug 4, 2026 | Aug 4, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.18Upgrade bpftool6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade microvm-kernel6.18Upgrade python3-perf6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extraUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-toolsUpgrade kernel-livepatch-6.18.35-68.127Upgrade kernel6.18-develUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade bpftool6.18Upgrade kernel6.18-headersUpgrade kernel6.18-tools-develUpgrade kernel6.18-modules-extra-common | Aug 18, 2026 | Jul 24, 2026 |
| Debian | — | Upgrade linux | Jul 26, 2026 | Jul 26, 2026 |
| Redhat_linux | — | No solution exists | Jul 29, 2026 | Jul 24, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.1-1059-realtimeUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1067-gcp-64kUpgrade linux-image-intelUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1062-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-139-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1061-oracleUpgrade linux-image-6.8.0-1064-raspiUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-azure-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1062-nvidiaUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-xilinxUpgrade linux-image-gkeUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1036-xilinxUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-139-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1049-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1062-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1067-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-139-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1062-gkeUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-bosUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-7.0Upgrade linux-image-awsUpgrade linux-image-6.8.0-2053-raspi-realtimeUpgrade linux-image-6.8.0-1061-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-139-lowlatency-64kUpgrade linux-image-6.8.0-1067-azureUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1067-gcpUpgrade linux-image-6.8.0-1062-gke-64kUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1064-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-oracleUpgrade linux-image-fipsUpgrade linux-image-6.8.0-139-lowlatencyUpgrade linux-image-6.8.0-1067-gcp-fipsUpgrade linux-image-6.8.0-1062-nvidia-lowlatencyUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1015-raspi-realtime | Jul 28, 2026 | Jul 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 28, 2026 | Jul 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub