In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
ACPICA commit 90310989a0790032f5a0140741ff09b545af4bc5
According to the ACPI specification 19.6.134, no argument is required to be passed for ASL Timer instruction. For taking care of no argument, AML_NO_OPERAND_RESOLVE flag is added to ASL Timer instruction opcode.
When ASL timer instruction interpreted by ACPI interpreter, getting error. After adding AML_NO_OPERAND_RESOLVE flag to ASL Timer instruction opcode, issue is not observed.
============================================================= UBSAN: array-index-out-of-bounds in acpica/dswexec.c:401:12 index -1 is out of range for type 'union acpi_operand_object *[9]' CPU: 37 PID: 1678 Comm: cat Not tainted 6.0.0-dev-th500-6.0.y-1+bcf8c46459e407-generic-64k HW name: NVIDIA BIOS v1.1.1-d7acbfc-dirty 12/19/2022 Call trace: dump_backtrace+0xe0/0x130 show_stack+0x20/0x60 dump_stack_lvl+0x68/0x84 dump_stack+0x18/0x34 ubsan_epilogue+0x10/0x50 __ubsan_handle_out_of_bounds+0x80/0x90 acpi_ds_exec_end_op+0x1bc/0x6d8 acpi_ps_parse_loop+0x57c/0x618 acpi_ps_parse_aml+0x1e0/0x4b4 acpi_ps_execute_method+0x24c/0x2b8 acpi_ns_evaluate+0x3a8/0x4bc acpi_evaluate_object+0x15c/0x37c acpi_evaluate_integer+0x54/0x15c show_power+0x8c/0x12c [acpi_power_meter]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.197-186.748Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf | Oct 16, 2025 | Sep 18, 2025 |
| Debian | — | Upgrade linux | Sep 22, 2025 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 14, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-lowlatencyUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-iotUpgrade linux-aws-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-realtimeUpgrade linux-azureUpgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-oracle-5.4Upgrade linux-riscv-5.15Upgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.4Upgrade linux-ibm-5.15Upgrade linuxUpgrade linux-nvidia-tegraUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-gcp | Sep 26, 2025 | Sep 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub