CVE-2026-93114

platform/surface: acpi-notify: Check ACPI companion before use

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/surface: acpi-notify: Check ACPI companion before use

Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), platform drivers that rely on the existence of a device's ACPI companion object should verify its presence.

san_probe() dereferences the result of ACPI_COMPANION() when installing the GSBUS address space handler, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. The dereference was introduced when the probe function was switched from ACPI_HANDLE() to ACPI_COMPANION().

Check the ACPI companion against NULL and return -ENODEV when it is missing, like commit e4865a56d013 ("ACPI: driver: Check ACPI_COMPANION() against NULL during probe") does for the core ACPI platform drivers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 4faa43d4ef0b98beb6c2b77a279f4aa5d7fa2d13Affected a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 3855be0100efb98c26228c610db70a673611f3bdAffected a9e10e58730432e5de840eb3ddd55c75f29341b3 to before f276b62f2ce1cbff7fa50a8ee5afd8fef5a60897Affected a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 9b6479da662c2ec4e931ed9f7228df46aa8c3766Affected a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 7fea5a310e3b2db24f7aafe64897e4e659ffbb7dAffected a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 428a82d987fcd8844e8868c85582eae75b4b5c51Affected a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 2b3a5dabe89e330413af403246b648c1890f368fAffected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 4faa43d4ef0b98beb6c2b77a279f4aa5d7fa2d13Affected
a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 3855be0100efb98c26228c610db70a673611f3bdAffected
a9e10e58730432e5de840eb3ddd55c75f29341b3 to before f276b62f2ce1cbff7fa50a8ee5afd8fef5a60897Affected
a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 9b6479da662c2ec4e931ed9f7228df46aa8c3766Affected
a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 7fea5a310e3b2db24f7aafe64897e4e659ffbb7dAffected
a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 428a82d987fcd8844e8868c85582eae75b4b5c51Affected
a9e10e58730432e5de840eb3ddd55c75f29341b3 to before 2b3a5dabe89e330413af403246b648c1890f368fAffected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.