CVE-2026-97454 - Vulnerability Details

- ACPICA: add boundary checks in acpi_ps_get_next_field()

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: add boundary checks in acpi_ps_get_next_field()

Add boundary checks in acpi_ps_get_next_field() to prevent out-of-bounds
access.

Published: 2026-09-24

Score: 7.7 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The kernel contains a flaw in the ACPICA acpi_ps_get_next_field() parser where boundary checks were omitted, allowing an out‑of-bounds memory access. If triggered, this can corrupt kernel memory and potentially lead to a system crash. The vulnerability is localized in the kernel's ACPI parsing code but could compromise overall system integrity.

Affected Systems

The issue affects the Linux operating system, specifically the Linux kernel. No specific version information is provided, so all releases prior to the application of the patch could be vulnerable.

Risk and Exploitability

The CVSS score of 7.7 indicates a high severity. The EPSS score is < 1% and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is related to ACPI table handling; an attacker might supply malformed ACPI data during boot or runtime to trigger the out‑of‑bounds access, though no public exploit has been observed.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 1d704a9ba665f8d1598fc6f37a76cbd6547cdcb1
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 6ecf2a4855a728c4c46e33919fea9480052d62a7
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 6509f56df51235fe447b624e40c098082717625c
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 7d97ecf2a4c7a77a9daa3fe76790ddecddc9cd0c
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< add715fc1ef5b0a71afe22b3f02aa28775d9ba62
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< bc5b2158c7626e3e8a78c5bb93ce0a734a26b84a
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< e15aa60de0256d63df2331bf5a4bc4dd287504cd

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`5.10.271`	unaffected	≤ 5.10.*
`5.15.222`	unaffected	≤ 5.15.*
`6.1.189`	unaffected	≤ 6.1.*
`6.6.158`	unaffected	≤ 6.6.*
`6.12.111`	unaffected	≤ 6.12.*
`6.18.53`	unaffected	≤ 6.18.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,add715fc1ef5b0a71afe22b3f02aa28775d9ba62)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,bc5b2158c7626e3e8a78c5bb93ce0a734a26b84a)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,e15aa60de0256d63df2331bf5a4bc4dd287504cd)`	affected	code_commit	—
`[0,6.12.111)`	affected	semver	—
`[0,6.18.53)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[6.12.111,6.13.0)`	unaffected	semver	—
`[6.18.53,6.19.0)`	unaffected	semver	—
`[7.2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade to a Linux kernel version that includes the boundary check patch for acpi_ps_get_next_field(), such as the revisions referenced in the provided git commits.
If an immediate kernel upgrade is not possible, restrict ACPI table sources or disable ACPI whenever feasible to reduce the attack surface.
Set up kernel audit rules or monitoring to detect anomalous ACPI activity or signs of memory corruption.

Generated by OpenCVE AI on September 26, 2026 at 01:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4817-1	linux-6.12 security update
Debian DLA	DLA-4841-1	linux security update
Debian DSA	DSA-6528-1	linux security update
Ubuntu USN	USN-8961-1	Linux kernel vulnerabilities

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00142.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1d704a9ba665f8d1598fc6f37a76cbd6547cdcb1
https://git.kernel.org/stable/c/6509f56df51235fe447b624e40c098082717625c
https://git.kernel.org/stable/c/6ecf2a4855a728c4c46e33919fea9480052d62a7
https://git.kernel.org/stable/c/7d97ecf2a4c7a77a9daa3fe76790ddecddc9cd0c
https://git.kernel.org/stable/c/add715fc1ef5b0a71afe22b3f02aa28775d9ba62
https://git.kernel.org/stable/c/bc5b2158c7626e3e8a78c5bb93ce0a734a26b84a
https://git.kernel.org/stable/c/e15aa60de0256d63df2331bf5a4bc4dd287504cd

History

Sat, 03 Oct 2026 11:15:00 +0000

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/1d704a9ba665f8d1598fc6f37a76cbd6547cdcb1 https://git.kernel.org/stable/c/6509f56df51235fe447b624e40c098082717625c https://git.kernel.org/stable/c/6ecf2a4855a728c4c46e33919fea9480052d62a7 https://git.kernel.org/stable/c/7d97ecf2a4c7a77a9daa3fe76790ddecddc9cd0c

Sat, 26 Sep 2026 02:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-119 CWE-680

Fri, 25 Sep 2026 10:15:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-119

Fri, 25 Sep 2026 07:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-119

Fri, 25 Sep 2026 05:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H'}`

Thu, 24 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi_ps_get_next_field() Add boundary checks in acpi_ps_get_next_field() to prevent out-of-bounds access.
Title		ACPICA: add boundary checks in acpi_ps_get_next_field()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/add715fc1ef5b0a71afe22b3f02aa28775d9ba62 https://git.kernel.org/stable/c/bc5b2158c7626e3e8a78c5bb93ce0a734a26b84a https://git.kernel.org/stable/c/e15aa60de0256d63df2331bf5a4bc4dd287504cd

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-24T16:04:10.819Z

Updated: 2026-10-03T10:58:38.664Z

Reserved: 2026-09-24T14:53:16.871Z

Link: CVE-2026-97454

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-24T17:17:23.823

Modified: 2026-10-03T11:17:57.227

Link: CVE-2026-97454

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-26T01:45:03Z

Weaknesses

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-680
Integer Overflow to Buffer Overflow

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object