PT-2026-94830 · Linux · Linux Kernel

CVE-2026-92522

·

Published

2026-09-17

·

Updated

2026-09-28

CVSS v3.1

7.3

High

VectorAV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ACPI processor component where the IOAPIC hotplug lookup fails to properly validate bounds when parsing MADT (Multiple APIC Description Table) and MAT records. The system previously relied on a subtable's declared length to advance the cursor after finding a generic header, and the MAT path passed a generic header to the IOAPIC helper without sufficient validation. This could lead to out-of-bounds reads if the declared length exceeds the available record range or if a typed IOAPIC record does not contain the full fixed IOAPIC body.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-101924
CVE-2026-92522
OPENSUSE-SU-2026:11893-1

Affected Products

Linux Kernel