CVE-2026-93115

platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL

Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence.

mlxbf_pmc_probe() passes the result of ACPI_COMPANION() to acpi_device_hid(), which dereferences it, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference.

Accordingly, add a requisite ACPI_COMPANION() check against NULL to the mlxbf-pmc driver and return -ENODEV when the companion is missing.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1a218d312e65ec396b2739056a8ea78493015f21 to before 950d8e8375f3ff4787de51b7bdf8dd23a3ad6547Affected 1a218d312e65ec396b2739056a8ea78493015f21 to before fdfb736282b9665c0169df0c4152ec91fdea2767Affected 1a218d312e65ec396b2739056a8ea78493015f21 to before bf1e0cc5cc1d4e71b699fc98cc9198ead0ed53e0Affected 1a218d312e65ec396b2739056a8ea78493015f21 to before a75b84119e56fc34b0f1403f3b93d357a55dabb6Affected 1a218d312e65ec396b2739056a8ea78493015f21 to before 71ba8b6e28f7a83b724036f5de07e03bb5473286Affected 1a218d312e65ec396b2739056a8ea78493015f21 to before d25dd08268aeaceb485189aaa84aa6d68a460291Affected 1a218d312e65ec396b2739056a8ea78493015f21 to before c38cce70adef874c2a7b5132c14d6c221401deffAffected
LinuxLinux	5.11Affected before 5.11Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

1a218d312e65ec396b2739056a8ea78493015f21 to before 950d8e8375f3ff4787de51b7bdf8dd23a3ad6547Affected
1a218d312e65ec396b2739056a8ea78493015f21 to before fdfb736282b9665c0169df0c4152ec91fdea2767Affected
1a218d312e65ec396b2739056a8ea78493015f21 to before bf1e0cc5cc1d4e71b699fc98cc9198ead0ed53e0Affected
1a218d312e65ec396b2739056a8ea78493015f21 to before a75b84119e56fc34b0f1403f3b93d357a55dabb6Affected
1a218d312e65ec396b2739056a8ea78493015f21 to before 71ba8b6e28f7a83b724036f5de07e03bb5473286Affected
1a218d312e65ec396b2739056a8ea78493015f21 to before d25dd08268aeaceb485189aaa84aa6d68a460291Affected
1a218d312e65ec396b2739056a8ea78493015f21 to before c38cce70adef874c2a7b5132c14d6c221401deffAffected

LinuxLinux

5.11Affected
before 5.11Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.