CVE-2020-14372

CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...

CVE-2020-15780-exploit

American Unsigned Language by zx2c4 These are two exploits to disable kernel lockdown via ACPI table injection. american-unsigned-language.sh is for Ubuntu 18.04 Bionic's 4.15 kernel with their custom patches and uses one technique. CVE-2019-20908. american-unsigned-language-2.sh is for...

CVE-2026-50080

Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by sending a crafted ACPI request...

EUVD-2026-122693

Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by sending a crafted ACPI request...

CVE-2026-50080

A Stack-based Buffer Overflow exists in the ACPI event handler of the QNX Virtual Machine (QVM) , affecting QNX Hypervisor and QNX Hypervisor for Safety . An attacker residing in a guest environment could crash the QVM by transmitting a crafted ACPI request . The vulnerability is associated with ...

PT-2026-144433

Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by sending a crafted ACPI request...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151081 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice CVE-2026-100072 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpfrefcount field as unique CVE-2026-100074 In the Linux kernel, the...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3402)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3402 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpibusgetprimarydevice CVE-2026-100072 In the Linux kernel, the following vulnerability has been...

CVE-2026-97454

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. Missing boundary checks in the ACPICA parser allow reading past buffer boundaries when processing malformed table data. An attacker capable of supplying crafted ACPI tables could exploit this flaw to...

CVE-2026-97453

A flaw was found in the Linux kernel's ACPICA Advanced Configuration and Power Interface Component Architecture subsystem. The acpipsgetnextpackagelength function fails to properly validate the byte count when reading package lengths. A local user capable of supplying malformed ACPI tables can...

CVE-2026-97447

A flaw was found in the Linux kernel. This vulnerability can lead to a Denial of Service DoS due to a buffer overflow in the ACPI Advanced Configuration and Power Interface subsystem. A local attacker can exploit this flaw by providing malformed OEM and table identifiers during table loading...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

Astra Linux – vulnerability in linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee “ACPI: button: Install notifier for system events as well” changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY; however, it failed to...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warnings caused by improper field usage The definition of reg-accesswidth varies based on the reg-spaceid type. The ACPIADRSPACEPLATFORMCOMM type utilizes accesswidth to specify the PCC region; if this...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent iterates over the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id =...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: nouveau/gsp: removing the WARNON messages in ACPI probes. These WARNON messages seem to trigger frequently, and we currently do not have a plan to fix them. Therefore, we’re simply removing them, as they are likely harmless...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrsacpihid command-line parser appends entries to a fixed four-element earlyacpihidmap array. Unlike the IOAPIC and HPET parsers, it does not reject a fifth entry before incrementing t...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and MAT records directly. Previously, the MADT walk used the declared length of a subtable to advance the cursor after only locating a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fixed a NULL pointer dereference in cs35l41getacpimutestate. The return value of the function acpievaluatedsm is dereferenced without checking for NULL. However, this check is usually performed for this...