What’s Vulnerable › Vulnerabilities

CVE-2026-97456: ACPICA: Fix condition check in acpi_ps_parse_loop()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop() Fix condition check for AML_ELSE_OP in acpi_ps_parse_loop() to prevent out-of-bounds access.

Affected products

• Linux kernel: from 4.17.3 before 4.18; 4.18 — fixed in 4.18, 7.2

How to fix

Upgrade to a fixed version: Linux kernel 4.18, 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4c22c9842c53b824743bdf1d8d19e1cdb908f82e
• https://git.kernel.org/stable/c/5d16f40b019e59df81deb594ed4eafefc8e43cc0
• https://git.kernel.org/stable/c/8de27e2d83c0d07ae9443c6304575b0609394bfd
• https://git.kernel.org/stable/c/a477c6ef5335d2d0613ff7c1779a8209f16627c5
• https://git.kernel.org/stable/c/b79f5cb2131956a7d2c99870336d9fcc6db80c4b
• https://git.kernel.org/stable/c/c838d32fbe02a6d426aebf95d2aef97de92ddc43
• https://git.kernel.org/stable/c/de2bbc8dbe7048f20f0a783a81e712fd3664de5b

Get alerted when CVE-2026-97456 or the next vulnerability affects your stack