8.4

CVE-2026-89588

ACPI: APEI: GHES: fix ARM section length accounting after header

In the Linux kernel, the following vulnerability has been resolved:

ACPI: APEI: GHES: fix ARM section length accounting after header

In ghes_handle_arm_hw_error(), after skipping the cper_sec_proc_arm
header with (err + 1), the remaining length was reduced by sizeof(err)
(pointer size) instead of sizeof(*err) (structure size).

That overestimates the bytes left for cper_arm_err_info records and can
let the parser read past the CPER section when err_info_num is large
enough relative to error_data_length.

Use sizeof(*err) so the length accounting matches the pointer advance
and the earlier sizeof(*err) size check.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 242c652849d979d0133c315a42d9acea0ff88390
Version < 5ff385e9403e87ae33f65b8c38698d3b1e92cfde
Status affected
Version 136093ba4161e0080088abff48273f6830a47766
Version < 452eb28e03015abec6d4bf6488ee567706ade4e1
Status affected
Version 87880af2d24e62a84ed19943dbdd524f097172f2
Version < b48b613073c3d652cb1823c15d16f7067cf4cee4
Status affected
Version 87880af2d24e62a84ed19943dbdd524f097172f2
Version < 903308ea40adf0577d82eab69882faf8836326ce
Status affected
Version db103b8bd3a4aca69b1b5fe8831a6ed75ac4b3bd
Status affected
Version 6.12.75
Version < 6.12.109
Status affected
Version 6.18.16
Version < 6.18.50
Status affected
Version 6.19.6
Version < 6.20
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.0
Status affected
Version 0
Version < 7.0
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.08
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5ff385e9403e87ae33f65b8c38698d3b1e92cfde
https://git.kernel.org/stable/c/452eb28e03015abec6d4bf6488ee567706ade4e1
https://git.kernel.org/stable/c/b48b613073c3d652cb1823c15d16f7067cf4cee4
https://git.kernel.org/stable/c/903308ea40adf0577d82eab69882faf8836326ce