In the Linux kernel, the following vulnerability has been resolved:

fpga: region: fix use-after-free in child_regions_with_firmware()

Move of_node_put(child_region) after the error print to avoid accessing
freed memory when pr_err() references child_region.

[ Yilun: Fix the Fixes tag ]

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00165.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < e918942bcc5355ad5b44ba557935dffc0727b0eb
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < 866184fc7ae42a0070f1141ae8c5dca7c24a59e2
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < 070b0ce947b18fa3dec0729695147f7e19599649
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < fbaf509ad7cb2f7dafe73ca20c956104cfcc9d68
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < e79afcb0a66d2b3c33e510eade902537e656fc00
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < 369496d885b4cf6e8647cf4dc5cf3ac68fdf37a1
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < 5e098e40e8bac43ed58645c10d5fad781966efe4
0fa20cdfcc1f68847cdfc47824476301eedc8297 affected < 54f3c5643ec523a04b6ec0e7c19eb10f5ebebdd3
Linux Linux affected
Version Status Constraints
4.10 affected —
0 unaffected < 4.10
5.10.260 unaffected ≤ 5.10.*
5.15.211 unaffected ≤ 5.15.*
6.1.177 unaffected ≤ 6.1.*
6.6.144 unaffected ≤ 6.6.*
6.12.95 unaffected ≤ 6.12.*
6.18.38 unaffected ≤ 6.18.*
7.1.3 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4700-1 linux-6.1 security update
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/070b0ce947b18fa3dec0729695147f7e19599649 cve-icon
https://git.kernel.org/stable/c/369496d885b4cf6e8647cf4dc5cf3ac68fdf37a1 cve-icon
https://git.kernel.org/stable/c/54f3c5643ec523a04b6ec0e7c19eb10f5ebebdd3 cve-icon
https://git.kernel.org/stable/c/5e098e40e8bac43ed58645c10d5fad781966efe4 cve-icon
https://git.kernel.org/stable/c/866184fc7ae42a0070f1141ae8c5dca7c24a59e2 cve-icon
https://git.kernel.org/stable/c/e79afcb0a66d2b3c33e510eade902537e656fc00 cve-icon
https://git.kernel.org/stable/c/e918942bcc5355ad5b44ba557935dffc0727b0eb cve-icon
https://git.kernel.org/stable/c/fbaf509ad7cb2f7dafe73ca20c956104cfcc9d68 cve-icon
History

Fri, 24 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_with_firmware() Move of_node_put(child_region) after the error print to avoid accessing freed memory when pr_err() references child_region. [ Yilun: Fix the Fixes tag ]
Title fpga: region: fix use-after-free in child_regions_with_firmware()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-24T15:31:16.458Z

Reserved: 2026-07-19T15:36:31.772Z

Link: CVE-2026-64249

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-24T22:15:03Z

Weaknesses

No weakness.