Vulnerability of the acpi_device_add() function in the drivers/acpi/scan.c module – The ACPI support driver for the Linux kernel’s core, which allows attackers to access protected information.

🗓️ 09 May 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Vulnerability in acpi_device_add() of Linux kernel ACPI driver may leak memory before the last reference.

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2021-1685 (ALAS-2021-1685)	16 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-004 (ALASKERNEL-5.4-2022-004)	2 May 202200:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	TencentOS Server 3: kernel (TSSA-2024:1027)	20 Nov 202500:00	–	nessus
Tenable Nessus	TencentOS Server 2: kernel (TSSA-2024:1030)	16 Jun 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986461)	7 Oct 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987158)	7 Oct 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989776)	5 Nov 202500:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b
git	www.git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb
git	www.git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5
git	www.git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72
git	www.git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a
git	www.git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87
git	www.git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4
git	www.git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
lore	www.lore.kernel.org/linux-cve-announce/2024022824-CVE-2021-46985-4dad@gregkh/T/

09 May 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.6

CVSS 35.5

EPSS0.00249

linux kernel acpi driver acpi device add memory leak memory release protected information