CVE-2025-71101: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
The hppopulateelementsfrompackage() functions in the hp-bioscfg driver contain out-of-bounds array access vulnerabilities.
These functions parse ACPI packages into internal data structures using a for loop with index variable 'elem' that iterates through enumobj/integerobj/orderobj/passwordobj/stringobj arrays.
When processing multi-element fields like PREREQUISITES and ENUMPOSSIBLEVALUES, these functions read multiple consecutive array elements using expressions like 'enumobj[elem + reqs]' and 'enumobj[elem + posvalues]' within nested loops.
The bug is that the bounds check only validated elem, but did not consider the additional offset when accessing elem + reqs or elem + posvalues.
The fix changes the bounds check to validate the actual accessed index.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71101?
CVE-2025-71101 has a moderate severity rating due to the potential for out-of-bounds array access.
What does CVE-2025-71101 affect?
CVE-2025-71101 affects the Linux kernel, specifically the hp-bioscfg component.
How do I fix CVE-2025-71101?
To fix CVE-2025-71101, update your Linux kernel to the latest version that resolves this vulnerability.
What are the potential consequences of CVE-2025-71101?
Exploitation of CVE-2025-71101 could lead to denial of service or potential code execution due to memory corruption.
When was CVE-2025-71101 disclosed?
CVE-2025-71101 was disclosed as part of a routine security update for the Linux kernel.