CVE-2026-89588

Received Received - Intake

GHES Section Length Miscalculation in Linux Kernel

Publication date: 2026-09-11

Last updated on: 2026-09-13

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes_handle_arm_hw_error(), after skipping the cper_sec_proc_arm header with (err + 1), the remaining length was reduced by sizeof(err) (pointer size) instead of sizeof(*err) (structure size). That overestimates the bytes left for cper_arm_err_info records and can let the parser read past the CPER section when err_info_num is large enough relative to error_data_length. Use sizeof(*err) so the length accounting matches the pointer advance and the earlier sizeof(*err) size check.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-13

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-10-01

NVD

CVE-2026-89588

EUVD

EUVD-2026-76500

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability in the ACPI APEI GHES component. It involves incorrect length accounting after reading an ARM hardware error header. The code subtracts the wrong size (pointer size instead of structure size) when calculating remaining bytes for error records. This can cause the parser to read past the intended CPER section if the error record count is large relative to the section length.

Detection Guidance

This vulnerability is specific to the Linux kernel's ACPI APEI GHES handling. Detection requires checking kernel logs for ACPI-related errors or examining the kernel version for affected code. Commands like 'dmesg | grep -i acpi' or 'journalctl -k | grep -i ghes' may help identify related errors.

Impact Analysis

This vulnerability could allow memory corruption or crashes in the Linux kernel when processing hardware error records. It may lead to system instability, denial of service, or potential privilege escalation if exploited by a local attacker with access to trigger ACPI error events.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level memory parsing issue in the Linux kernel's ACPI error handling that could lead to buffer overreads under specific conditions. Compliance impacts would only occur if exploitation led to data exposure or system instability, which is not described in the provided context.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this issue. Monitor kernel security advisories and apply patches promptly. If immediate patching is not possible, consider disabling ACPI APEI GHES features if they are not critical to system operation.

Hi! I’m here to help you understand CVE-2026-89588. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70