NetSight
IP …
high7.8

CVE-2025-38386

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platform…

Impact

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platform firmware update that increased the number of method parameters and forgot to update a least one of its callers, caused ACPICA to crash due to use-after-free. Since this a result of a clear AML issue that arguably cannot be fixed up by the interpreter (it cannot produce missing data out of thin air), address it by making ACPICA refuse to evaluate a method if the caller attempts to pass fewer arguments than expected to it.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.296
from 5.5 before 5.10.240
from 5.11 before 5.15.187
from 5.16 before 6.1.144
from 6.2 before 6.6.97
from 6.7 before 6.12.37
DebianDebian Linux
Version 11.0

Weakness classification

CWE-416

References