PT-2026-94830 · Linux · Linux Kernel
CVE-2026-92522
·
Published
2026-09-17
·
Updated
2026-09-28
CVSS v3.1
7.3
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the ACPI processor component where the IOAPIC hotplug lookup fails to properly validate bounds when parsing MADT (Multiple APIC Description Table) and MAT records. The system previously relied on a subtable's declared length to advance the cursor after finding a generic header, and the MAT path passed a generic header to the IOAPIC helper without sufficient validation. This could lead to out-of-bounds reads if the declared length exceeds the available record range or if a typed IOAPIC record does not contain the full fixed IOAPIC body.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel