What’s Vulnerable › Vulnerabilities

CVE-2026-97448: ACPICA: Add validation for node in acpi_ns_build_normalized_path()

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path() Add validation for node in acpi_ns_build_normalized_path() to prevent use-after-free vulnerabilities.

Affected products

• Linux kernel: 4.3 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/087eed8b347e14864f8806fa1f5976c7dc2c6792
• https://git.kernel.org/stable/c/21a73528579fcbd673b668bd27a05b658123bc1b
• https://git.kernel.org/stable/c/26dd27000e9540fcb594f15010b0696b03b0d240
• https://git.kernel.org/stable/c/90ebe7f8bb6ca1c6eadb16bed141ab8bb3dbab70
• https://git.kernel.org/stable/c/96b2b616870e46e2bc04efec03879683a0036e66
• https://git.kernel.org/stable/c/b06bb9b82c8f9a522dde213b1e0ddd535f22e3a2
• https://git.kernel.org/stable/c/babb146ceb79e71f328788f1e2c8c7c224026e61

Get alerted when CVE-2026-97448 or the next vulnerability affects your stack