CVE-2023-54244

ACPI: EC: Fix oops when removing custom query handlers

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 23, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: EC: Fix oops when removing custom query handlers

When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was already unloaded.

Fix this by flushing the EC query workqueue when removing custom query handlers.

Tested on a Acer Travelmate 4002WLMi

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before 130e3eac51912f2c866e7d035992ede25f8feac0Affected
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before 0d528a7c421b1f1772fc1d29370b3b5fc0f42b19Affected
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before ccae2233e9935a038a35fe8cfd703df905f700e7Affected
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before 066b90bca755f0b876e7b027b75d1796861d6db0Affected
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before f4a573eed6377d356f835a4b00099d5dacee0da0Affected
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before 86a159fd5bdb01ec34b160cfda1a313b616d9302Affected
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before fd2c99e81ae0dbdd62a154ef9c77fc01715cc020Affected
  • a62e8f1978f49e52f87a711ff6711b323d4b12ff to before e5b492c6bb900fcf9722e05f4a10924410e170c1Affected
  • 1ff7b99e4983d9e93d25e98ba1ce303ad4e4909eAffected
  • 2.6.32.6 to before 2.6.33Affected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 4.14.316 through 4.14.*Not affected
  • 4.19.284 through 4.19.*Not affected
  • 5.4.244 through 5.4.*Not affected
  • 5.10.181 through 5.10.*Not affected
  • 5.15.113 through 5.15.*Not affected
  • 6.1.30 through 6.1.*Not affected
  • 6.3.4 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.