CVE-2026-97455: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()
ACPICA: Fix use-after-free in acpidsterminatecontrolmethod()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.158.1-1 - Compensating control
Clear references to method locals and arguments in acpi_ds_terminate_control_method() to fix the use-after-free issue.
Event History
Frequently Asked Questions
Which systems are potentially affected?
Systems using the Linux kernel's ACPICA implementation are potentially affected. The provided information does not identify specific kernel versions or configurations.
What is the immediate remediation?
Apply a Linux kernel update that includes the ACPICA fix for acpi_ds_terminate_control_method(). The listed stable-kernel references identify commits containing the fix.
What does the fix change?
The fix clears references to control-method local variables and arguments during method termination. This prevents those references from being used after their associated memory has been freed.