In the Linux kernel, the following vulnerability has been resolved:
platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
The hp_populate_*_elements_from_package() functions in the hp-bioscfg driver contain out-of-bounds array access vulnerabilities.
These functions parse ACPI packages into internal data structures using a for loop with index variable 'elem' that iterates through enum_obj/integer_obj/order_obj/password_obj/string_obj arrays.
When processing multi-element fields like PREREQUISITES and ENUM_POSSIBLE_VALUES, these functions read multiple consecutive array elements using expressions like 'enum_obj[elem + reqs]' and 'enum_obj[elem + pos_values]' within nested loops.
The bug is that the bounds check only validated elem, but did not consider the additional offset when accessing elem + reqs or elem + pos_values.
The fix changes the bounds check to validate the actual accessed index.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-6.17Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1052-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1022-nvidia-tegraUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-6.17.0-1020-oemUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-6.8.0-1051-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.8.0-1052-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.17.0-1012-awsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1050-gke-64kUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-6.17Upgrade linux-image-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1050-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1051-ibmUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-oracle-6.17Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1054-gcp-fipsUpgrade linux-image-6.17.0-1013-azureUpgrade linux-image-generic-64k-6.17Upgrade linux-image-generic-6.17Upgrade linux-image-6.8.0-1052-aws-fipsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1051-nvidia-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-110-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-nvidia-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-2042-raspi-realtimeUpgrade linux-image-6.8.0-1049-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1022-nvidia-tegra-rtUpgrade linux-image-aws-6.17Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1051-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-6.8Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1047-realtimeUpgrade linux-image-6.8.0-110-lowlatencyUpgrade linux-image-6.8.0-1049-oracle-64kUpgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-110-genericUpgrade linux-image-6.8.0-1054-azureUpgrade linux-image-6.8.0-1054-azure-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1054-gcp-64kUpgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-110-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-6.17Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-110-lowlatency-64kUpgrade linux-image-6.8.0-1054-gcpUpgrade linux-image-6.8.0-1052-awsUpgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1037-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8 | Apr 17, 2026 | Jan 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub