CVE-2026-64249

kernel: fpga: region: fix use-after-free in child_regions_with_firmware()

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel FPGA region code. child_regions_with_firmware() drops a device-tree node reference and then logs that node, so the error path uses the node after it has been freed.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-416 · Use After Free