In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4… (CVE-2026-64165)
A vulnerability in the Linux kernel ARM integrator platform was resolved by fixing early initialization code. The issue occurs because early initialization calls syscon_regmap_lookup_by_compatible, which allocates memory before the memory management subsystem is initialized, causing a NULL pointer dereference or memory allocation failure. This can lead to kernel crashes (Oops) during boot. The problem is compiler-dependent and has been observed with gcc versions 10.x, 11.x, and 13.x. The fix involves moving the early initialization code to the standard machine initialization phase.
AI Analysis
Technical Summary
The Linux kernel ARM integrator platform had a vulnerability where early initialization code called syscon_regmap_lookup_by_compatible, which internally calls of_syscon_register that allocates memory. Since memory management was not yet initialized, this caused a NULL pointer dereference or returned -ENOMEM, leading to kernel crashes during boot. The issue is compiler-dependent and reproducible with gcc 10.x, 11.x, and 13.x. The fix was implemented by moving the early initialization code into the standard machine initialization code, preventing memory allocation before memory management is ready.
Potential Impact
The vulnerability can cause kernel crashes (NULL pointer dereference) during early boot on ARM integrator platforms, potentially leading to denial of service. The crash occurs due to memory allocation attempts before memory management initialization. The impact is limited to affected ARM integrator platforms and specific kernel versions with the vulnerable initialization sequence.
Mitigation Recommendations
A fix has been implemented by moving the early initialization code to the standard machine initialization phase. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the specific fixed version and apply the update accordingly.
In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4… (CVE-2026-64165)
Description
A vulnerability in the Linux kernel ARM integrator platform was resolved by fixing early initialization code. The issue occurs because early initialization calls syscon_regmap_lookup_by_compatible, which allocates memory before the memory management subsystem is initialized, causing a NULL pointer dereference or memory allocation failure. This can lead to kernel crashes (Oops) during boot. The problem is compiler-dependent and has been observed with gcc versions 10.x, 11.x, and 13.x. The fix involves moving the early initialization code to the standard machine initialization phase.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel ARM integrator platform had a vulnerability where early initialization code called syscon_regmap_lookup_by_compatible, which internally calls of_syscon_register that allocates memory. Since memory management was not yet initialized, this caused a NULL pointer dereference or returned -ENOMEM, leading to kernel crashes during boot. The issue is compiler-dependent and reproducible with gcc 10.x, 11.x, and 13.x. The fix was implemented by moving the early initialization code into the standard machine initialization code, preventing memory allocation before memory management is ready.
Potential Impact
The vulnerability can cause kernel crashes (NULL pointer dereference) during early boot on ARM integrator platforms, potentially leading to denial of service. The crash occurs due to memory allocation attempts before memory management initialization. The impact is limited to affected ARM integrator platforms and specific kernel versions with the vulnerable initialization sequence.
Mitigation Recommendations
A fix has been implemented by moving the early initialization code to the standard machine initialization phase. Users should update to a Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the specific fixed version and apply the update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-w8wx-87mq-w4r7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64165"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a72a4a8d5989129d9f
Added to database: 07/19/2026, 19:38:15 UTC
Last enriched: 07/19/2026, 19:38:41 UTC
Last updated: 07/20/2026, 11:31:33 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.