CVE-2026-64227: ACPI: driver: Check ACPI_COMPANION() against NULL during probe
In the Linux kernel, the following vulnerability has been resolved:
ACPI: driver: Check ACPICOMPANION() against NULL during probe
Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of devicematchdriveroverride(), platform drivers that rely on the existence of a device's ACPI companion object should verify its presence.
Accordingly, add requisite ACPICOMPANION() or ACPIHANDLE() checks against NULL to 13 platform drivers handling core ACPI devices.
Also change the value returned by the ACPI thermal zone driver when the device's ACPI companion is not present to -ENODEV for consistency with the other drivers.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64227?
The severity of CVE-2026-64227 is medium with a CVSS score of 5.5.
How do I fix CVE-2026-64227?
To fix CVE-2026-64227, you should apply the available patch provided for the Linux kernel.
What type of vulnerability is CVE-2026-64227?
CVE-2026-64227 is categorized as a Null Pointer Dereference vulnerability.
What is the impact of CVE-2026-64227?
CVE-2026-64227 can lead to denial of service due to a potential crash in the Linux kernel.
When was CVE-2026-64227 published?
CVE-2026-64227 was published on July 24, 2026.