CVE-2026-97448: ACPICA: Add validation for node in acpi_ns_build_normalized_path()
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add validation for node in acpinsbuildnormalizedpath()
Add validation for node in acpinsbuildnormalizedpath() to prevent use-after-free vulnerabilities.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Add validation for the node in acpi_ns_build_normalized_path() to prevent use-after-free vulnerabilities.
Event History
Frequently Asked Questions
What code path is affected?
The issue is in the ACPICA implementation of acpi_ns_build_normalized_path() in the Linux kernel. The fix adds validation of the node argument before it is used.
What is the security impact of this flaw?
Without node validation, the affected function can be exposed to use-after-free vulnerabilities. The provided information does not specify exploitation prerequisites, affected configurations, or observable indicators of compromise.
Where can I obtain the fix?
The listed stable-kernel references identify commits babb146ceb79e71f328788f1e2c8c7c224026e61, 21a73528579fcbd673b668bd27a05b658123bc1b, and 96b2b616870e46e2bc04efec03879683a0036e66.