PT-2026-97938 · Linux · Linux Kernel

CVE-2026-93251

·

Published

2026-09-24

·

Updated

2026-09-28

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free issue exists in the ACPI bus. The function acpi get first physical node() may return a stale device pointer because acpi unbind one() can execute after the ACPI device's physical node lock is released but before the function returns. This can lead to the last reference of the physical device being dropped. If a caller then invokes get device() on the returned pointer, a use-after-free occurs.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-93251
OPENSUSE-SU-2026:11893-1

Affected Products

Linux Kernel