CVE-2026-64227
Received Received - Intake

ACPI NULL Pointer Dereference in Linux Kernel

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), platform drivers that rely on the existence of a device's ACPI companion object should verify its presence. Accordingly, add requisite ACPI_COMPANION() or ACPI_HANDLE() checks against NULL to 13 platform drivers handling core ACPI devices. Also change the value returned by the ACPI thermal zone driver when the device's ACPI companion is not present to -ENODEV for consistency with the other drivers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-64227
EUVD
EUVD-2026-48635

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves platform drivers not properly checking for the existence of an ACPI companion object during device probe. Normally, drivers expect a device to have an ACPI companion, but a feature called device_match_driver_override can force a driver to match a device that lacks this companion. The fix adds NULL checks for ACPI_COMPANION() or ACPI_HANDLE() in 13 platform drivers to prevent potential issues when the companion is missing.

Detection Guidance

This vulnerability is specific to the Linux kernel and involves ACPI driver probe checks. Detection requires verifying if platform drivers handling core ACPI devices lack NULL checks for ACPI_COMPANION() or ACPI_HANDLE(). Check kernel logs for ACPI-related probe failures or driver mismatches. Use commands like dmesg | grep -i acpi or journalctl -k | grep -i acpi to inspect ACPI driver behavior.

Impact Analysis

If exploited, this could lead to system instability or crashes in affected drivers, as they may attempt to access non-existent ACPI companion objects. Users might experience kernel panics, boot failures, or unexpected behavior in systems relying on ACPI for power management or device handling.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a Linux kernel driver issue where platform drivers must verify the presence of an ACPI companion object during probe. There is no indication of data exposure, privacy risks, or protected health information handling in the provided context.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the ACPI driver NULL checks. Monitor vendor advisories for kernel updates. If immediate patching is not possible, restrict device driver overrides and disable untrusted ACPI device matching until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64227. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart