Back to CVE records
High 7.7Published Sep 24, 2026
CVE-2026-97454ACPICA: add boundary checks in acpi_ps_get_next_field()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi_ps_get_next_field() Add boundary checks in acpi_ps_get_next_field() to prevent out-of-bounds access.
- CVSS
- 7.7 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 1d704a9ba665f8d1598fc6f37a76cbd6547cdcb1; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6ecf2a4855a728c4c46e33919fea9480052d62a7; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6509f56df51235fe447b624e40c098082717625c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7d97ecf2a4c7a77a9daa3fe76790ddecddc9cd0c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before add715fc1ef5b0a71afe22b3f02aa28775d9ba62; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bc5b2158c7626e3e8a78c5bb93ce0a734a26b84a; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e15aa60de0256d63df2331bf5a4bc4dd287504cd | CNA record |
References
- https://git.kernel.org/stable/c/1d704a9ba665f8d1598fc6f37a76cbd6547cdcb1
- https://git.kernel.org/stable/c/6ecf2a4855a728c4c46e33919fea9480052d62a7
- https://git.kernel.org/stable/c/6509f56df51235fe447b624e40c098082717625c
- https://git.kernel.org/stable/c/7d97ecf2a4c7a77a9daa3fe76790ddecddc9cd0c
- https://git.kernel.org/stable/c/add715fc1ef5b0a71afe22b3f02aa28775d9ba62
- https://git.kernel.org/stable/c/bc5b2158c7626e3e8a78c5bb93ce0a734a26b84a
- https://git.kernel.org/stable/c/e15aa60de0256d63df2331bf5a4bc4dd287504cd
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.