CVE-2026-97456

A flaw was found in the Linux kernel's ACPI Component Architecture ACPICA subsystem. When parsing ACPI Machine Language AML bytecode, a missing boundary check allows an out-of-bounds memory read. An attacker capable of supplying crafted ACPI tables could exploit this flaw to trigger a kernel cras...

CVE-2026-97446

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface component. When the system processes a malformed ACPI package provided by firmware with an unresolvable reference, the kernel dereferences a NULL pointer without prior validation. This issue leads to a kernel...

CVE-2026-97444

A flaw was found in the Linux kernel. Missing boundary checks within the ACPICA ACPI Component Architecture subsystem allow out-of-bounds memory access when parsing ACPI bytecode. An attacker capable of supplying malformed ACPI tables can trigger this vulnerability, leading to a kernel crash and ...

CVE-2020-14372

CVE-2020-14372: Eludiendo no tan Secure Boot con un "simple truco" Detalles de la vulnerabilidad Un día escribí "help" en la consola de GRUB2 y vi algunos comandos muy "divertidos": readbyte ADDR: Lee un valor de 8 bits desde ADDR writebyte ADDR VAL: Escribe un valor de 8 bits VAL en ADDR...

ROS-20260929-73-0190

The vulnerability of the acpinswalknamespace function in the drivers/acpi/acpica/nswalk.c driver of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

UBUNTU-CVE-2026-100072

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

CVE-2026-93788

A flaw was found in the Linux kernel's iwlwifi wireless driver. When processing Advanced Configuration and Power Interface ACPI data, the driver does not properly validate the revision index of the WiFi Global Dynamic SAR WGDS table before performing a bit-shift calculation. An invalid revision...

CVE-2026-100839

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

CVE-2026-100839

In versions before 1.18.0 , the Contrast confidential-computing runtime for Kubernetes is vulnerable to an AML injection attack (known as "BadAML"). An attacker controlling the host can pass malicious, Turing-complete AML bytecode via ACPI tables to the guest firmware (OVMF) and the Linux kernel....

CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...

CVE-2020-15780-exploit

American Unsigned Language 作者：zx2c4 这两个漏洞利用程序通过ACPI表注入来禁用内核锁定。 amerian-unsigned-language.sh 适用于Ubuntu 18.04 Bionic的4.15内核，使用其自定义补丁和一种技术。CVE-2019-20908。 amerian-unsigned-language-2.sh 适用于主线/上游内核，使用不同的技术。CVE-2020-15780。 每个脚本的头部都包含解释说明。...

SUSE CVE-2026-100072

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

CVE-2026-100072 ACPI: platform: Use acpi_bus_get_primary_device()

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice The acpigetfirstphysicalnode usage in acpiplatformfillresource and acpicreateplatformdevice is generally unsafe because in theory the device returned by it may be freed at any time 1. I...

CVE-2026-100072

The Linux kernel contains a vulnerability in the ACPI subsystem where the use of acpi_get_first_physical_node() in acpi_platform_fill_resource() and acpi_create_platform_device() is considered unsafe because the returned device may be freed at any time. The current implementation is also ineffici...

DEBIAN-CVE-2026-93788

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate WGDS table revision index Check tblrev bounds before BITtblrev to avoid undefined shifts when firmware reports an invalid revision value...

AZL-103739 CVE-2026-93788 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate WGDS table revision index Check tblrev bounds before BITtblrev to avoid undefined shifts when firmware reports an invalid revision value...

CVE-2026-93788

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: acpi: validate WGDS table revision index Check tblrev bounds before BITtblrev to avoid undefined shifts when firmware reports an invalid revision value...

DEBIAN-CVE-2026-93251

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpibusgetprimarydevice The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpigetfirstphysicalnode, may return a stale device pointer mostly in...

CVE-2026-93251

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpibusgetprimarydevice The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpigetfirstphysicalnode, may return a stale device pointer mostly in...

AZL-103826 CVE-2026-93251 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpibusgetprimarydevice The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpigetfirstphysicalnode, may return a stale device pointer mostly in...