In the Linux kernel, the following vulnerability has been resolved:
platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
The GET_INSTANCE_ID macro that caused a kernel panic when accessing sysfs attributes:
1. Off-by-one error: The loop condition used '<=' instead of '<', causing access beyond array bounds. Since array indices are 0-based and go from 0 to instances_count-1, the loop should use '<'.
2. Missing NULL check: The code dereferenced attr_name_kobj->name without checking if attr_name_kobj was NULL, causing a null pointer dereference in min_length_show() and other attribute show functions.
The panic occurred when fwupd tried to read BIOS configuration attributes:
Oops: general protection fault [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:min_length_show+0xcf/0x1d0 [hp_bioscfg]
Add a NULL check for attr_name_kobj before dereferencing and corrects the loop boundary to match the pattern used elsewhere in the driver.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-nvidia-64k-6.17Upgrade linux-image-gke-64kUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-gke-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-realtime-6.17Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-nvidia-6.17Upgrade linux-image-6.17.0-1030-oemUpgrade linux-image-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04dUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-6.17Upgrade linux-image-azure-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-xilinxUpgrade linux-image-oem-6.17Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fips-6.8 | May 25, 2026 | May 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub