Not yet scoredPublished Sep 24, 2026

CVE-2026-97456ACPICA: Fix condition check in acpi_ps_parse_loop()

Updated under an hour ago (Oct 27, 2026, 3:10 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop() Fix condition check for AML_ELSE_OP in acpi_ps_parse_loop() to prevent out-of-bounds access.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before c838d32fbe02a6d426aebf95d2aef97de92ddc43; from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before b79f5cb2131956a7d2c99870336d9fcc6db80c4b; from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before de2bbc8dbe7048f20f0a783a81e712fd3664de5b; 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 builds before 4c22c9842c53b824743bdf1d8d19e1cdb908f82e; from 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 before a477c6ef5335d2d0613ff7c1779a8209f16627c5; 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 builds before 5d16f40b019e59df81deb594ed4eafefc8e43cc0; 5088814a6e931350e5bd29f5d59fa40c6dbbdf10 builds before 8de27e2d83c0d07ae9443c6304575b0609394bfd; 2e78935d1e27d31955ad2dad4abe6c453cf669fd; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/c838d32fbe02a6d426aebf95d2aef97de92ddc43
https://git.kernel.org/stable/c/b79f5cb2131956a7d2c99870336d9fcc6db80c4b
https://git.kernel.org/stable/c/de2bbc8dbe7048f20f0a783a81e712fd3664de5b
https://git.kernel.org/stable/c/4c22c9842c53b824743bdf1d8d19e1cdb908f82e
https://git.kernel.org/stable/c/a477c6ef5335d2d0613ff7c1779a8209f16627c5
https://git.kernel.org/stable/c/5d16f40b019e59df81deb594ed4eafefc8e43cc0
https://git.kernel.org/stable/c/8de27e2d83c0d07ae9443c6304575b0609394bfd

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.