Linux Distros Unpatched Vulnerability : CVE-2026-89587

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816...

CVE-2026-89587

A flaw was found in the Linux kernel's ACPI Platform Firmware Runtime Update pfrupdate component. The querycapability function, responsible for handling ACPI buffer objects from firmware, performs an unchecked memory copy operation. If the firmware provides an oversized buffer, a stack buffer...

CVE-2026-89587

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

DEBIAN-CVE-2026-89587

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

AZL-100392 CVE-2026-89587 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

CVE-2026-89587 ACPI: pfr_update: fix stack buffer overflow in query_capability()

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

EUVD-2026-76499

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

CVE-2026-89587 ACPI: pfr_update: fix stack buffer overflow in query_capability()

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

CVE-2026-89587

CVE-2026-89587 is a stack buffer overflow in the Linux kernel's ACPI Platform Firmware Runtime Update (pfr_update) driver. The query_capability() function uses memcpy to copy four firmware-supplied ACPI buffer objects (code_type, drv_type, platform_id, oem_id) into fixed-size u8[16] fields of the...

CVE-2026-89587

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

The vulnerability in the acpi/pfr_update.c driver of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the acpi/pfrupdate.c driver of the Linux operating system is related to the comparison using incorrect factors. Exploiting this vulnerability allows an attacker to cause a service failure...