CVE-2026-97448
What it is
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path() Add validation for node in acpi_ns_build_normalized_path() to prevent use-after-free vulnerabilities.
At a glance
- Exploitability
- Can be exploited locally on the machine without logging in. High risk of data exposure, service disruption.
- Exploit odds
- 0.1% chance of exploitation in the next 30 days (EPSS).
- Fix
- No patch or advisory is linked yet. Look at mitigations or restrict exposure.
Timeline
- ReservedThe CVE id was reserved by its CNA
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Exploit probability
- 0.1% · EPSS, next 30 days
- Record status
- Received
Attack profile CVSS 3.1 · 7.7
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Raw vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References
- https://git.kernel.org/stable/c/087eed8b347e14864f8806fa1f5976c7dc2c6792
- https://git.kernel.org/stable/c/21a73528579fcbd673b668bd27a05b658123bc1b
- https://git.kernel.org/stable/c/26dd27000e9540fcb594f15010b0696b03b0d240
- https://git.kernel.org/stable/c/90ebe7f8bb6ca1c6eadb16bed141ab8bb3dbab70
- https://git.kernel.org/stable/c/96b2b616870e46e2bc04efec03879683a0036e66
- https://git.kernel.org/stable/c/b06bb9b82c8f9a522dde213b1e0ddd535f22e3a2
- https://git.kernel.org/stable/c/babb146ceb79e71f328788f1e2c8c7c224026e61