CVE-2025-38386

ACPICA: Refuse to evaluate a method if arguments are missing

State: Published
Severity: 7.8 High
Published: Jul 25, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Refuse to evaluate a method if arguments are missing

As reported in [1], a platform firmware update that increased the number of method parameters and forgot to update a least one of its callers, caused ACPICA to crash due to use-after-free.

Since this a result of a clear AML issue that arguably cannot be fixed up by the interpreter (it cannot produce missing data out of thin air), address it by making ACPICA refuse to evaluate a method if the caller attempts to pass fewer arguments than expected to it.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b49d224d1830c46e20adce2a239c454cdab426f1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2219e49857ffd6aea1b1ca5214d3270f84623a16Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4305d936abde795c2ef6ba916de8f00a50f64d2dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d547779e72cea9865b732cd45393c4cd02b3598eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 18ff4ed6a33a7e3f2097710eacc96bea7696e803Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c9e4da550ae196132b990bd77ed3d8f2d9747f87Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6fcab2791543924d438e7fa49276d0998b0a069fAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.296 through 5.4.Not affected 5.10.240 through 5.10.Not affected 5.15.187 through 5.15.Not affected 6.1.144 through 6.1.Not affected 6.6.97 through 6.6.Not affected 6.12.37 through 6.12.Not affected 6.15.6 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b49d224d1830c46e20adce2a239c454cdab426f1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2219e49857ffd6aea1b1ca5214d3270f84623a16Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4305d936abde795c2ef6ba916de8f00a50f64d2dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d547779e72cea9865b732cd45393c4cd02b3598eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 18ff4ed6a33a7e3f2097710eacc96bea7696e803Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c9e4da550ae196132b990bd77ed3d8f2d9747f87Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6fcab2791543924d438e7fa49276d0998b0a069fAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.296 through 5.4.*Not affected
5.10.240 through 5.10.*Not affected
5.15.187 through 5.15.*Not affected
6.1.144 through 6.1.*Not affected
6.6.97 through 6.6.*Not affected
6.12.37 through 6.12.*Not affected
6.15.6 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.