CVE-2026-93133: ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep() In riscv_acpi_add_prt_dep(), the acpi_get_handle() call can fail which would leave link_handle uninitialized. Fix it by checking the acpi_get_handle() return status and skip the entry if it fails.

Affected products

Linux kernel: 6.12 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/088c1c85921344d7244ca2e8d5d336ae7461de6e
https://git.kernel.org/stable/c/20435bda13f1219891ed0ce41207e320a916ff9c
https://git.kernel.org/stable/c/4cdcf4e19ed3127afd787f026d4ec56ae4d2a4ed
https://git.kernel.org/stable/c/f8625752bfdf108a0000116aa583b3efe767b540

Get alerted when CVE-2026-93133 or the next vulnerability affects your stack