CVE-2026-90137

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hp-bioscfg platform driver where the PSWD ENCODINGS password parser fails to properly validate bounds when copying supported password encodings from the ACPI package. While the outer loop ensures elem is within password obj count, it does not guarantee that the ACPI package contains sufficient entries for all elem + pos values accesses. A malformed package can declare a non-zero encoding count without providing enough string objects, leading the parser to read past the ACPI package array. This results in an out-of-bounds string pointer and length being passed to the hp convert hexstr to str() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.