High 7.7Published Sep 24, 2026

CVE-2026-97444ACPICA: add boundary checks in two places

Updated under an hour ago (Oct 28, 2026, 4:30 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places Add boundary checks in acpi_ps_get_next_namestring() and acpi_ps_peek_opcode() to prevent out-of-bounds access.

CVSS: 7.7 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3a8c1efc0fd3abb2d2b1254315f36db03abc88eb; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c917df56b73719a2d4cee1c4ab4a6626acb95315; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4f03d84c95a51436878cd750a14f8ca37eeb3112; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 38ee32a9ace6fae8965f059b38e6e7fb27b1e7ce; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 253d7272d01db9529c79b95205c0f859ef9f4f23; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4de2cffef5e6b5b79eec8c934df582459b818228; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bdc35754012906dbf094be104b103ca3adfef6f7	CNA record

References

References

https://git.kernel.org/stable/c/3a8c1efc0fd3abb2d2b1254315f36db03abc88eb
https://git.kernel.org/stable/c/c917df56b73719a2d4cee1c4ab4a6626acb95315
https://git.kernel.org/stable/c/4f03d84c95a51436878cd750a14f8ca37eeb3112
https://git.kernel.org/stable/c/38ee32a9ace6fae8965f059b38e6e7fb27b1e7ce
https://git.kernel.org/stable/c/253d7272d01db9529c79b95205c0f859ef9f4f23
https://git.kernel.org/stable/c/4de2cffef5e6b5b79eec8c934df582459b818228
https://git.kernel.org/stable/c/bdc35754012906dbf094be104b103ca3adfef6f7

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.