CVE-2026-64510

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface (ACPI) Non-Volatile Memory (NVM) Firmware Interface Table (NFIT) core. Improper error handling during the initialization process can leave a dangling pointer. A local attacker could potentially trigger an ACPI Machine Check Exception, leading to a use-after-free vulnerability. This could result in system instability, denial of service, or potentially lead to further compromise of the system.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local system access, systems equipped with ACPI NFIT firmware tables, and an initial driver initialization error followed by a hardware machine check event. Typical enterprise installations lacking NVDIMM hardware or where device probing completes cleanly will not enter this failure state. Consequently, an unprivileged local user faces significant practical barriers to intentionally inducing the required conditions, restricting the primary realistic impact to a local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.