Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4… (CVE-2026-64165)

0
Medium
Published: 07/19/2026 (07/19/2026, 18:31:54 UTC)
Source: GCVE Database

Description

A vulnerability in the Linux kernel ARM integrator platform was resolved by fixing early initialization code. The issue occurs because early initialization calls syscon_regmap_lookup_by_compatible, which allocates memory before the memory management subsystem is initialized, causing a NULL pointer dereference or memory allocation failure. This can lead to kernel crashes (Oops) during boot. The problem is compiler-dependent and has been observed with gcc versions 10.x, 11.x, and 13.x. The fix involves moving the early initialization code to the standard machine initialization phase.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/19/2026, 19:38:41 UTC

Technical Analysis

The Linux kernel ARM integrator platform had a vulnerability where early initialization code called syscon_regmap_lookup_by_compatible, which internally calls of_syscon_register that allocates memory. Since memory management was not yet initialized, this caused a NULL pointer dereference or returned -ENOMEM, leading to kernel crashes during boot. The issue is compiler-dependent and reproducible with gcc 10.x, 11.x, and 13.x. The fix was implemented by moving the early initialization code into the standard machine initialization code, preventing memory allocation before memory management is ready.

Potential Impact

The vulnerability can cause kernel crashes (NULL pointer dereference) during early boot on ARM integrator platforms, potentially leading to denial of service. The crash occurs due to memory allocation attempts before memory management initialization. The impact is limited to affected ARM integrator platforms and specific kernel versions with the vulnerable initialization sequence.

Mitigation Recommendations

A fix has been implemented by moving the early initialization code to the standard machine initialization phase. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the specific fixed version and apply the update accordingly.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-w8wx-87mq-w4r7
Osv Schema Version
1.4.0
Aliases
["CVE-2026-64165"]
Ecosystems
[]
Database Specific Severity
null
Cvss Version
null

Threat ID: 6a5d27a72a4a8d5989129d9f

Added to database: 07/19/2026, 19:38:15 UTC

Last enriched: 07/19/2026, 19:38:41 UTC

Last updated: 07/20/2026, 11:31:33 UTC

Views: 11

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses