CVE-2025-38386: ACPICA: Refuse to evaluate a method if arguments are missing
ACPICA: Refuse to evaluate a method if arguments are missing
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Make ACPICA refuse to evaluate a method when the caller passes fewer arguments than the method expects.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38386?
CVE-2025-38386 is classified as a medium severity vulnerability.
How do I fix CVE-2025-38386?
To fix CVE-2025-38386, update your Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2025-38386?
CVE-2025-38386 affects Linux kernel versions from 5.4.0 up to 6.16-rc2, excluding patched versions.
What type of vulnerability is CVE-2025-38386?
CVE-2025-38386 is a vulnerability in the ACPICA that can refuse to evaluate a method if arguments are missing.
Is CVE-2025-38386 specific to any Linux distributions?
CVE-2025-38386 is relevant to various Linux distributions using the affected kernel versions, such as Debian.