What’s Vulnerable › Vulnerabilities

CVE-2026-97453: ACPICA: validate byte_count in acpi_ps_get_next_package_length()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length() Validate package length reading in acpi_ps_get_next_package_length().

Affected products

• Linux kernel: 2.6.12 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/37e60db04eed9d6c5801d63f99cfd3af99b9a2c8
• https://git.kernel.org/stable/c/6b9904fc65d82bea4922a33038d075488954bcc9
• https://git.kernel.org/stable/c/6e0d26e6ec90340533722214b7a923521f91caa2
• https://git.kernel.org/stable/c/780f380c66b80030379bec65bb1bd09ce6f6d9fc
• https://git.kernel.org/stable/c/802f83e628b8fa6106428ef05d3fb03f99816fd6
• https://git.kernel.org/stable/c/9bc0e8c3df689765ad5161eb3aed15de8544f5ce
• https://git.kernel.org/stable/c/d49c6ee08365a8596f639da46eb7e71752b0cd42

Get alerted when CVE-2026-97453 or the next vulnerability affects your stack