Back to CVE records
Not yet scoredPublished Sep 24, 2026
CVE-2026-97453ACPICA: validate byte_count in acpi_ps_get_next_package_length()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length() Validate package length reading in acpi_ps_get_next_package_length().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6b9904fc65d82bea4922a33038d075488954bcc9; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 802f83e628b8fa6106428ef05d3fb03f99816fd6; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 37e60db04eed9d6c5801d63f99cfd3af99b9a2c8; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6e0d26e6ec90340533722214b7a923521f91caa2; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 780f380c66b80030379bec65bb1bd09ce6f6d9fc; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9bc0e8c3df689765ad5161eb3aed15de8544f5ce; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d49c6ee08365a8596f639da46eb7e71752b0cd42 | CNA record |
References
- https://git.kernel.org/stable/c/6b9904fc65d82bea4922a33038d075488954bcc9
- https://git.kernel.org/stable/c/802f83e628b8fa6106428ef05d3fb03f99816fd6
- https://git.kernel.org/stable/c/37e60db04eed9d6c5801d63f99cfd3af99b9a2c8
- https://git.kernel.org/stable/c/6e0d26e6ec90340533722214b7a923521f91caa2
- https://git.kernel.org/stable/c/780f380c66b80030379bec65bb1bd09ce6f6d9fc
- https://git.kernel.org/stable/c/9bc0e8c3df689765ad5161eb3aed15de8544f5ce
- https://git.kernel.org/stable/c/d49c6ee08365a8596f639da46eb7e71752b0cd42
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.