CVE-2025-71101

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The hp populate * elements from package() functions within the hp-bioscfg driver contain out-of-bounds array access issues. These functions parse ACPI packages, and a flaw exists in how array indices are validated during the processing of multi-element fields like PREREQUISITES and ENUM POSSIBLE VALUES. The original bounds check only verified the elem variable, failing to account for additional offsets (reqs or pos values) when accessing array elements, potentially leading to memory corruption. The fix modifies the bounds check to validate the actual accessed index.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.