CVE-2026-97453

high

Description

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length() Validate package length reading in acpi_ps_get_next_package_length().

References

https://git.kernel.org/stable/c/d49c6ee08365a8596f639da46eb7e71752b0cd42

https://git.kernel.org/stable/c/9bc0e8c3df689765ad5161eb3aed15de8544f5ce

https://git.kernel.org/stable/c/802f83e628b8fa6106428ef05d3fb03f99816fd6

https://git.kernel.org/stable/c/780f380c66b80030379bec65bb1bd09ce6f6d9fc

https://git.kernel.org/stable/c/6e0d26e6ec90340533722214b7a923521f91caa2

https://git.kernel.org/stable/c/6b9904fc65d82bea4922a33038d075488954bcc9

https://git.kernel.org/stable/c/37e60db04eed9d6c5801d63f99cfd3af99b9a2c8

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-86066

Details

Source: Mitre, NVD

Published: 2026-09-24

Updated: 2026-10-03

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H