Github Enterprise - Remote Code Execution

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the...

Linux Distros Unpatched Vulnerability : CVE-2026-89588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining...

CVE-2026-89588

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI APEI Generic Hardware Error Source GHES component. Incorrect length accounting in the gheshandlearmhwerror function can lead to the parser reading beyond the allocated memory section. This out-of-bounds read...

CVE-2026-89589

A flaw was found in the ACPI/APEI/GHES component of the Linux kernel. Incorrect usage of spinlocks in the CXL CPER work registration and unregistration helpers can lead to a deadlock. If a CPU holds a lock while a GHES interrupt arrives on the same CPU, the interrupt handler will spin on the held...

CVE-2026-89588

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

DEBIAN-CVE-2026-89588

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

CVE-2026-89589

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

EUVD-2026-76501

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

CVE-2026-89589 acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

CVE-2026-89589 acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use rawspinlockt for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxlcperworklock and cxlcperproterrworklock with a spinlock guard, which leaves local interrupts enabled. T...

CVE-2026-89589

CVE-2026-89589 affects the Linux kernel in the acpi/apei/ghes subsystem, specifically the CXL CPER work registration and unregistration helpers. The root cause is a deadlock : the CXL CPER work locks are acquired with a regular spinlock guard (interrupts enabled) in register/unregister paths, whi...

CVE-2026-89588

CVE-2026-89588 is a Linux kernel vulnerability in the ACPI APEI GHES (Generic Hardware Error Source) component, specifically in ghes_handle_arm_hw_error(). After skipping the cper_sec_proc_arm header via pointer arithmetic (err + 1), the remaining buffer length was incorrectly reduced by sizeof(e...

CVE-2026-89588

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

CVE-2026-89588 ACPI: APEI: GHES: fix ARM section length accounting after header

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

EUVD-2026-76500

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

CVE-2026-89588 ACPI: APEI: GHES: fix ARM section length accounting after header

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

PT-2026-90305

In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw spinlock t for CXL CPER work locks The CXL CPER work registration and unregistration helpers acquire cxl cper work lock and cxl cper prot err work lock with a spinlock guard, which leaves local interrupts...

PT-2026-90304

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes handle arm hw error, after skipping the cper sec proc arm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeofe...

ghes-cve-scanner

GHES CVE Scanner Detects whether GitHub Enterprise Server GHES instances are affected by CVE-2026-3854 and CVE-2026-4821. CVE Background CVE-2026-3854 CVSS 8.7 Git Push RCE — The babeld component does not sanitize semicolons in git push options, allowing remote code execution. Affected versions:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: Fixed an integer overflow in ghesestatuspoolinit. The variable numghes was changed from int to unsigned int, preventing an overflow and causing subsequent vmalloc calls to fail. The overflow occurs in...