CVE-2026-97455: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix use-after-free in acpidsterminatecontrolmethod()
Fix use-after-free issue in acpidsterminatecontrolmethod() by clearing references to method locals and arguments.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Clear references to method locals and arguments in acpi_ds_terminate_control_method() to fix the use-after-free issue.
Event History
Frequently Asked Questions
Which systems are potentially affected?
Systems using the Linux kernel's ACPICA implementation are potentially affected. The provided information does not identify specific kernel versions or configurations.
What is the immediate remediation?
Apply a Linux kernel update that includes the ACPICA fix for acpi_ds_terminate_control_method(). The listed stable-kernel references identify commits containing the fix.
What does the fix change?
The fix clears references to control-method local variables and arguments during method termination. This prevents those references from being used after their associated memory has been freed.