In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()
acpi_ns_custom_package() unconditionally dereferences the first element of the package to read the _BIX version number, without checking for NULL:
if ((*Elements)->Common.Type != ACPI_TYPE_INTEGER)
When firmware returns a _BIX package whose first element is an unresolvable reference, ACPICA evaluates that entry to NULL. acpi_ns_remove_null_elements() does not strip NULL entries for ACPI_PTYPE_CUSTOM packages (fixed-position format would break if elements were shifted), so acpi_ns_custom_package() sees the NULL and causes a crash.
Add a NULL check for the first element (version field) before dereferencing it. The caller then receives AE_AML_OPERAND_TYPE instead of crashing.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel6.12-toolsUpgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel6.12-develUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.189-236.399Upgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-tools-develUpgrade kernel-toolsUpgrade microvm-kernelUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftool6.12Upgrade kernel-livepatch-6.12.111-136.204Upgrade kernel6.12-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade perf-debuginfo | Oct 13, 2026 | Sep 24, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Sep 30, 2026 | Sep 24, 2026 |
| Redhat_linux | — | No solution exists | Oct 1, 2026 | Sep 24, 2026 |
| Ubuntu | — | Upgrade linux-riscvUpgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-azure-fde-5.15Upgrade linux-azure-fdeUpgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-oem-7.0Upgrade linux-oracle-5.15Upgrade linuxUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-riscv-7.0Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-hwe-7.0Upgrade linux-hwe-5.15Upgrade linux-kvm | Nov 3, 2026 | Sep 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Sep 24, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub