CVE-2026-97454

ACPICA: add boundary checks in acpi_ps_get_next_field()

State: Published
Severity: 7.7 High
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: add boundary checks in acpi_ps_get_next_field()

Add boundary checks in acpi_ps_get_next_field() to prevent out-of-bounds access.

Scores

CVSS	Score	Vector	Source
3.1	7.7 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1d704a9ba665f8d1598fc6f37a76cbd6547cdcb1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ecf2a4855a728c4c46e33919fea9480052d62a7Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6509f56df51235fe447b624e40c098082717625cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d97ecf2a4c7a77a9daa3fe76790ddecddc9cd0cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before add715fc1ef5b0a71afe22b3f02aa28775d9ba62Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bc5b2158c7626e3e8a78c5bb93ce0a734a26b84aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e15aa60de0256d63df2331bf5a4bc4dd287504cdAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1d704a9ba665f8d1598fc6f37a76cbd6547cdcb1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ecf2a4855a728c4c46e33919fea9480052d62a7Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6509f56df51235fe447b624e40c098082717625cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d97ecf2a4c7a77a9daa3fe76790ddecddc9cd0cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before add715fc1ef5b0a71afe22b3f02aa28775d9ba62Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bc5b2158c7626e3e8a78c5bb93ce0a734a26b84aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e15aa60de0256d63df2331bf5a4bc4dd287504cdAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.