CVE-2026-97456ACPICA: Fix condition check in acpi_ps_parse_loop()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop() Fix condition check for AML_ELSE_OP in acpi_ps_parse_loop() to prevent out-of-bounds access.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before c838d32fbe02a6d426aebf95d2aef97de92ddc43; from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before b79f5cb2131956a7d2c99870336d9fcc6db80c4b; from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before de2bbc8dbe7048f20f0a783a81e712fd3664de5b; 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 builds before 4c22c9842c53b824743bdf1d8d19e1cdb908f82e; from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before a477c6ef5335d2d0613ff7c1779a8209f16627c5; 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 builds before 5d16f40b019e59df81deb594ed4eafefc8e43cc0; 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 builds before 8de27e2d83c0d07ae9443c6304575b0609394bfd; 2e78935d1e27d31955ad2dad4abe6c453cf669fd; and 1 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/c838d32fbe02a6d426aebf95d2aef97de92ddc43
- https://git.kernel.org/stable/c/b79f5cb2131956a7d2c99870336d9fcc6db80c4b
- https://git.kernel.org/stable/c/de2bbc8dbe7048f20f0a783a81e712fd3664de5b
- https://git.kernel.org/stable/c/4c22c9842c53b824743bdf1d8d19e1cdb908f82e
- https://git.kernel.org/stable/c/a477c6ef5335d2d0613ff7c1779a8209f16627c5
- https://git.kernel.org/stable/c/5d16f40b019e59df81deb594ed4eafefc8e43cc0
- https://git.kernel.org/stable/c/8de27e2d83c0d07ae9443c6304575b0609394bfd
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.