7.3

CVE-2026-92522

ACPI: processor: validate MADT IOAPIC entry bounds

In the Linux kernel, the following vulnerability has been resolved:

ACPI: processor: validate MADT IOAPIC entry bounds

The IOAPIC hotplug lookup parses both MADT and _MAT records directly.
The MADT walk previously used a subtable's declared length to advance
the cursor after only locating a generic header.  The _MAT path likewise
passed a generic header to the IOAPIC helper.

Validate that a current record has a complete generic header, that its
declared length is contained in the available record range, and that a
typed IOAPIC record contains the full fixed IOAPIC body before reading
its fields.  Use the same relation for both MADT and _MAT provider
paths.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < 5601bd81bc290a724ed47797d22c16cba4d7ed9f
Status affected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < ff82e3374e9103d046b2a82f4315d9a422ff097d
Status affected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < 2a5520065e76000f8c979d3d7b3d861ccaaecf1e
Status affected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < 8e67b58c04990817ac2dbf8ae03353be6a358cd4
Status affected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < 74d84320f8e37955eb286a7777843d554e6e75b2
Status affected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < 4d8ecaa332c163f2b44aa5027bf061950b71b5f3
Status affected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < 355bee5f11acb116cd256588631b4028ca562646
Status affected
Version ecf5636dcd59cd5508641f995cc4c2bafedbb995
Version < 2c50ffdc73f3a70d745d249f509fc290754121e6
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.0
Status affected
Version 0
Version < 4.0
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.036
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.3 2.5 4.7
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5601bd81bc290a724ed47797d22c16cba4d7ed9f
https://git.kernel.org/stable/c/ff82e3374e9103d046b2a82f4315d9a422ff097d
https://git.kernel.org/stable/c/2a5520065e76000f8c979d3d7b3d861ccaaecf1e
https://git.kernel.org/stable/c/8e67b58c04990817ac2dbf8ae03353be6a358cd4
https://git.kernel.org/stable/c/74d84320f8e37955eb286a7777843d554e6e75b2
https://git.kernel.org/stable/c/4d8ecaa332c163f2b44aa5027bf061950b71b5f3
https://git.kernel.org/stable/c/355bee5f11acb116cd256588631b4028ca562646
https://git.kernel.org/stable/c/2c50ffdc73f3a70d745d249f509fc290754121e6