CVE-2026-97444

ACPICA: add boundary checks in two places

State: Published
Severity: 7.7 High
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: add boundary checks in two places

Add boundary checks in acpi_ps_get_next_namestring() and acpi_ps_peek_opcode() to prevent out-of-bounds access.

Scores

CVSS	Score	Vector	Source
3.1	7.7 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3a8c1efc0fd3abb2d2b1254315f36db03abc88ebAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c917df56b73719a2d4cee1c4ab4a6626acb95315Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f03d84c95a51436878cd750a14f8ca37eeb3112Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 38ee32a9ace6fae8965f059b38e6e7fb27b1e7ceAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 253d7272d01db9529c79b95205c0f859ef9f4f23Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4de2cffef5e6b5b79eec8c934df582459b818228Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bdc35754012906dbf094be104b103ca3adfef6f7Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3a8c1efc0fd3abb2d2b1254315f36db03abc88ebAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c917df56b73719a2d4cee1c4ab4a6626acb95315Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f03d84c95a51436878cd750a14f8ca37eeb3112Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 38ee32a9ace6fae8965f059b38e6e7fb27b1e7ceAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 253d7272d01db9529c79b95205c0f859ef9f4f23Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4de2cffef5e6b5b79eec8c934df582459b818228Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bdc35754012906dbf094be104b103ca3adfef6f7Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.