What’s Vulnerable › Vulnerabilities

CVE-2024-56782: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-08 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() acpi_dev_hid_match() does not check for adev == NULL, dereferencing it unconditional. Add a check for adev being NULL before calling acpi_dev_hid_match(). At the moment acpi_quirk_skip_serdev_enumeration() is never called with a controller_parent without an ACPI companion, but better safe than sorry.

Affected products

• Linux kernel: before 6.12.5 — fixed in 6.12.5

How to fix

Upgrade to a fixed version: Linux kernel 6.12.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4a49194f587a62d972b602e3e1a2c3cfe6567966
• https://git.kernel.org/stable/c/e173bce05f7032a8b4964cfef82a4b7668f5f3af

Get alerted when CVE-2024-56782 or the next vulnerability affects your stack