CVE-2026-89436 platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc-sinf acpipccretrievebiosdata rejects SINF packages only when pcc-numsifr is strictly less than hkey-package.count, then unconditionally writes a trailing sentinel at...

CVE-2026-81011 platform/x86: hp-bioscfg: pass validated element count to package parsers

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are handed the wrong element count. hpinitbiospackageattribute validates obj-package.count and then calls one of the five...

CVE-2026-81011 platform/x86: hp-bioscfg: pass validated element count to package parsers

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type package parsers are handed the wrong element count. hpinitbiospackageattribute validates obj-package.count and then calls one of the five...

CVE-2026-81011

CVE-2026-81011 affects the Linux kernel's hp-bioscfg platform driver (platform/x86). The per-type package parsers derive the element count from elements[0] (the ACPI NAME field, always a string) rather than the validated obj->package.count, causing them to bound against the name string length ...

CVE-2026-89589: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107270 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The return value of acpifetchacpidev...

CVE-2026-89588: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

PT-2026-90303

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2-rc6 Description A stack buffer overflow exists in the ACPI pfr update component. The query capability function uses memcpy to copy four ACPI buffer objects returned by the firmware DSM into fixed-size u816...

PT-2026-96438

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr update: fix stack buffer overflow in query capability query capability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfru update cap info using memcpy with the...

CVE-2026-89587: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

PT-2026-90141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap read exists in the hp-bioscfg component of the x86 platform. The function hp init bios package attribute validates the obj-package.count but subsequently calls hp...

The vulnerability of the uniwill_init() function in the drivers/platform/x86/uniwill/uniwill-acpi.c driver for X86 processors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the uniwillinit function in the drivers/platform/x86/uniwill/uniwill-acp.c driver for X86 devices in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the acpi_button_remove() function in the drivers/acpi/button.c driver of the ACPI configuration and power management extended interface for the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the acpibuttonremove function in the drivers/acpi/button.c driver of the Linux ACPI configuration and power management extension framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053437 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...

The vulnerability of the acpi_ecremove_query_handlers() function in the drivers/acpi/ec.c file of the ACPI configuration and power management extended interface driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the acpiecremovequeryhandlers function in the drivers/acpi/ec.c file of the ACPI configuration and power management extended interface driver for the Linux operating system is related to the race condition that occurs when a common resource is used. Exploiting this...

SUSE CVE-2026-72432

In the Linux kernel, the following vulnerability has been resolved: tpmcrb: Check ACPICOMPANION against NULL during probe Every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride, so platform drivers that rely on the...

CVE-2026-80611

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI processor idle functionality. When kernel tracing features, such as function tracing or Kprobes, are enabled, entering a Low Power Idle LPI state can trigger a Read-Copy Update RCU warning. This occurs because...

The vulnerability of the __acpi_processor_start() function in the drivers/acpi/processor_driver.c file of the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the acpiprocessorstart function in the drivers/acpi/processordriver.c file of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-80593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001433)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001433 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of STR method Only buffer objects are valid return values of ST...