CVE-2026-23062: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: hp-bioscfg: Fix kernel panic in GETINSTANCEID macro
The GETINSTANCEID macro that caused a kernel panic when accessing sysfs attributes:
1. Off-by-one error: The loop condition used '<=' instead of '<', causing access beyond array bounds. Since array indices are 0-based and go from 0 to instancescount-1, the loop should use '<'.
2. Missing NULL check: The code dereferenced attrnamekobj->name without checking if attrnamekobj was NULL, causing a null pointer dereference in minlengthshow() and other attribute show functions.
The panic occurred when fwupd tried to read BIOS configuration attributes:
Oops: general protection fault [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:minlengthshow+0xcf/0x1d0 [hpbioscfg]
Add a NULL check for attrnamekobj before dereferencing and corrects the loop boundary to match the pattern used elsewhere in the driver.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23062?
CVE-2026-23062 has a medium severity score of 5.5 on the CVSS scale.
How do I fix CVE-2026-23062?
To fix CVE-2026-23062, a patch is available and should be applied to the affected Linux kernel.
What software is affected by CVE-2026-23062?
CVE-2026-23062 affects the Linux kernel within the platform/x86 subsystem.
What type of vulnerability is CVE-2026-23062?
CVE-2026-23062 is classified as a Null Pointer Dereference vulnerability.
What does CVE-2026-23062 impact?
CVE-2026-23062 impacts the GET_INSTANCE_ID macro causing a kernel panic when accessing sysfs attributes.