Back to CVE records
High 7.7Published Sep 24, 2026
CVE-2026-97444ACPICA: add boundary checks in two places
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpi_ps_get_next_namestring() and acpi_ps_peek_opcode() to prevent out-of-bounds access.
- CVSS
- 7.7 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3a8c1efc0fd3abb2d2b1254315f36db03abc88eb; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c917df56b73719a2d4cee1c4ab4a6626acb95315; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4f03d84c95a51436878cd750a14f8ca37eeb3112; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 38ee32a9ace6fae8965f059b38e6e7fb27b1e7ce; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 253d7272d01db9529c79b95205c0f859ef9f4f23; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4de2cffef5e6b5b79eec8c934df582459b818228; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bdc35754012906dbf094be104b103ca3adfef6f7 | CNA record |
References
- https://git.kernel.org/stable/c/3a8c1efc0fd3abb2d2b1254315f36db03abc88eb
- https://git.kernel.org/stable/c/c917df56b73719a2d4cee1c4ab4a6626acb95315
- https://git.kernel.org/stable/c/4f03d84c95a51436878cd750a14f8ca37eeb3112
- https://git.kernel.org/stable/c/38ee32a9ace6fae8965f059b38e6e7fb27b1e7ce
- https://git.kernel.org/stable/c/253d7272d01db9529c79b95205c0f859ef9f4f23
- https://git.kernel.org/stable/c/4de2cffef5e6b5b79eec8c934df582459b818228
- https://git.kernel.org/stable/c/bdc35754012906dbf094be104b103ca3adfef6f7
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.