Riskcovery

CVE-2026-64227

ACPI: driver: Check ACPI_COMPANION() against NULL during probe

State
Published
Severity
Not scored
Published
Jul 24, 2026
Updated
Jul 27, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPI: driver: Check ACPI_COMPANION() against NULL during probe

Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), platform drivers that rely on the existence of a device's ACPI companion object should verify its presence.

Accordingly, add requisite ACPI_COMPANION() or ACPI_HANDLE() checks against NULL to 13 platform drivers handling core ACPI devices.

Also change the value returned by the ACPI thermal zone driver when the device's ACPI companion is not present to -ENODEV for consistency with the other drivers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5829046825ac89fffc60f2670bc564fda2c0155a to before a9451bf561232314755baf69a5916e0ac77f33fcAffected
  • 5829046825ac89fffc60f2670bc564fda2c0155a to before 34f4d0e4e5065237d15651df759a99e81b7f9f51Affected
  • 5829046825ac89fffc60f2670bc564fda2c0155a to before 612ddab8fce04394bd7aebe8e0f2599642e30859Affected
  • 5829046825ac89fffc60f2670bc564fda2c0155a to before e4865a56d013e86e46ea6acea15bb6eae01898ffAffected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.