CVE-2026-64512 (GCVE-0-2026-64512)

Vulnerability from cvelistv5 – Published: 2026-07-25 08:52 – Updated: 2026-08-17 04:57
VLAI
Title
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
Summary
In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Suppress UBSAN warning caused by field misuse The definition of reg->access_width changes depending on the reg->space_id type. Type ACPI_ADR_SPACE_PLATFORM_COMM uses access_width to indicate the PCC region, which can result in a UBSAN if the value is greater than 4. For example: UBSAN: shift-out-of-bounds in drivers/acpi/cppc_acpi.c:1090:9 shift exponent 32 is too large for 32-bit type 'int' CPU: 61 UID: 0 PID: 1220 Comm: (udev-worker) Not tainted 7.0.10-201.fc44.aarch64 #1 PREEMPT(lazy) Hardware name: To be filled by O.E.M. Call trace: ...(trimming) ubsan_epilogue+0x10/0x48 __ubsan_handle_shift_out_of_bounds+0xdc/0x1e0 cpc_write+0x4d0/0x670 cppc_set_perf+0x18c/0x490 cppc_cpufreq_cpu_init+0x1c8/0x380 [cppc_cpufreq] ... (trimming) Lets fix this by validating the region type, as well as whether access_width has a value. Then since we are returning bit_width directly for ACPI_ADR_SPACE_PLATFORM_COMM, drop the code correcting the size.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 4949affd5288b867cdf115f5b08d6166b2027f87 , < b54c4632946ae42f2b39ed38abd909bbf78cbcc2 (git)
Affected: 01fc53be672acae37e611c80cc0b4f3939584de3 , < e904596ba6dd108534ffa15e3e46b2fe245145e2 (git)
Affected: 1b890ae474d19800a6be1696df7fb4d9a41676e4 , < 2fb80e962029000959f651665baa4838cc92eb99 (git)
Affected: 2f4a4d63a193be6fd530d180bb13c3592052904c , < 37f28bf8f14672dfa395994e41fd778a63f0bf5c (git)
Affected: 2f4a4d63a193be6fd530d180bb13c3592052904c , < f29dc6132d4968e39d8fa575d1a12e2c718ce57b (git)
Affected: 2f4a4d63a193be6fd530d180bb13c3592052904c , < dc066bd13c860bb27d6ace511210e18b8064c1d9 (git)
Affected: 2f4a4d63a193be6fd530d180bb13c3592052904c , < 1b1acf2dada0cc3931bb2cb9ff8832edfbee46a1 (git)
Affected: 6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1 (git)
Affected: 5.15.154 , < 5.15.155 (semver)
Affected: 6.1.90 , < 6.1.178 (semver)
Affected: 6.6.30 , < 6.6.145 (semver)
Affected: 6.8.9 , < 6.9 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.9
Unaffected: 0 , < 6.9 (semver)
Unaffected: 5.15.155 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.96 , ≤ 6.12.* (semver)
Unaffected: 6.18.39 , ≤ 6.18.* (semver)
Unaffected: 7.1.4 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/acpi/cppc_acpi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b54c4632946ae42f2b39ed38abd909bbf78cbcc2",
              "status": "affected",
              "version": "4949affd5288b867cdf115f5b08d6166b2027f87",
              "versionType": "git"
            },
            {
              "lessThan": "e904596ba6dd108534ffa15e3e46b2fe245145e2",
              "status": "affected",
              "version": "01fc53be672acae37e611c80cc0b4f3939584de3",
              "versionType": "git"
            },
            {
              "lessThan": "2fb80e962029000959f651665baa4838cc92eb99",
              "status": "affected",
              "version": "1b890ae474d19800a6be1696df7fb4d9a41676e4",
              "versionType": "git"
            },
            {
              "lessThan": "37f28bf8f14672dfa395994e41fd778a63f0bf5c",
              "status": "affected",
              "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
              "versionType": "git"
            },
            {
              "lessThan": "f29dc6132d4968e39d8fa575d1a12e2c718ce57b",
              "status": "affected",
              "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
              "versionType": "git"
            },
            {
              "lessThan": "dc066bd13c860bb27d6ace511210e18b8064c1d9",
              "status": "affected",
              "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
              "versionType": "git"
            },
            {
              "lessThan": "1b1acf2dada0cc3931bb2cb9ff8832edfbee46a1",
              "status": "affected",
              "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1",
              "versionType": "git"
            },
            {
              "lessThan": "5.15.155",
              "status": "affected",
              "version": "5.15.154",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.178",
              "status": "affected",
              "version": "6.1.90",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.145",
              "status": "affected",
              "version": "6.6.30",
              "versionType": "semver"
            },
            {
              "lessThan": "6.9",
              "status": "affected",
              "version": "6.8.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/acpi/cppc_acpi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.9"
            },
            {
              "lessThan": "6.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.155",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.96",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.39",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.155",
                  "versionStartIncluding": "5.15.154",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "6.1.90",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "6.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.96",
                  "versionStartIncluding": "6.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.39",
                  "versionStartIncluding": "6.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.4",
                  "versionStartIncluding": "6.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.8.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: CPPC: Suppress UBSAN warning caused by field misuse\n\nThe definition of reg-\u003eaccess_width changes depending on the\nreg-\u003espace_id type.  Type ACPI_ADR_SPACE_PLATFORM_COMM uses\naccess_width to indicate the PCC region, which can result in a UBSAN\nif the value is greater than 4.\n\nFor example:\n\n UBSAN: shift-out-of-bounds in drivers/acpi/cppc_acpi.c:1090:9\n shift exponent 32 is too large for 32-bit type \u0027int\u0027\n CPU: 61 UID: 0 PID: 1220 Comm: (udev-worker) Not tainted 7.0.10-201.fc44.aarch64 #1 PREEMPT(lazy)\n Hardware name: To be filled by O.E.M.\n Call trace:\n  ...(trimming)\n  ubsan_epilogue+0x10/0x48\n  __ubsan_handle_shift_out_of_bounds+0xdc/0x1e0\n  cpc_write+0x4d0/0x670\n  cppc_set_perf+0x18c/0x490\n  cppc_cpufreq_cpu_init+0x1c8/0x380 [cppc_cpufreq]\n  ... (trimming)\n\nLets fix this by validating the region type, as well as whether\naccess_width has a value. Then since we are returning bit_width\ndirectly for ACPI_ADR_SPACE_PLATFORM_COMM, drop the code correcting\nthe size."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T04:57:03.207Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b54c4632946ae42f2b39ed38abd909bbf78cbcc2"
        },
        {
          "url": "https://git.kernel.org/stable/c/e904596ba6dd108534ffa15e3e46b2fe245145e2"
        },
        {
          "url": "https://git.kernel.org/stable/c/2fb80e962029000959f651665baa4838cc92eb99"
        },
        {
          "url": "https://git.kernel.org/stable/c/37f28bf8f14672dfa395994e41fd778a63f0bf5c"
        },
        {
          "url": "https://git.kernel.org/stable/c/f29dc6132d4968e39d8fa575d1a12e2c718ce57b"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc066bd13c860bb27d6ace511210e18b8064c1d9"
        },
        {
          "url": "https://git.kernel.org/stable/c/1b1acf2dada0cc3931bb2cb9ff8832edfbee46a1"
        }
      ],
      "title": "ACPI: CPPC: Suppress UBSAN warning caused by field misuse",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-64512",
    "datePublished": "2026-07-25T08:52:04.423Z",
    "dateReserved": "2026-07-19T15:36:31.793Z",
    "dateUpdated": "2026-08-17T04:57:03.207Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-64512",
      "date": "2026-09-22",
      "epss": "0.00173",
      "percentile": "0.07061"
    },
    "microsoft_vex": {
      "current_release_date": "2026-07-27T14:51:42.000Z",
      "cve": "CVE-2026-64512",
      "id": "msrc_CVE-2026-64512",
      "initial_release_date": "2026-07-26T01:09:39.000Z",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "ACPI: CPPC: Suppress UBSAN warning caused by field misuse",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-64512.json",
      "version": "2"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/acpi/cppc_acpi.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "b54c4632946ae42f2b39ed38abd909bbf78cbcc2",
                    "status": "affected",
                    "version": "4949affd5288b867cdf115f5b08d6166b2027f87",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e904596ba6dd108534ffa15e3e46b2fe245145e2",
                    "status": "affected",
                    "version": "01fc53be672acae37e611c80cc0b4f3939584de3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2fb80e962029000959f651665baa4838cc92eb99",
                    "status": "affected",
                    "version": "1b890ae474d19800a6be1696df7fb4d9a41676e4",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "37f28bf8f14672dfa395994e41fd778a63f0bf5c",
                    "status": "affected",
                    "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f29dc6132d4968e39d8fa575d1a12e2c718ce57b",
                    "status": "affected",
                    "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "dc066bd13c860bb27d6ace511210e18b8064c1d9",
                    "status": "affected",
                    "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "1b1acf2dada0cc3931bb2cb9ff8832edfbee46a1",
                    "status": "affected",
                    "version": "2f4a4d63a193be6fd530d180bb13c3592052904c",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5.15.155",
                    "status": "affected",
                    "version": "5.15.154",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.1.178",
                    "status": "affected",
                    "version": "6.1.90",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.6.145",
                    "status": "affected",
                    "version": "6.6.30",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.9",
                    "status": "affected",
                    "version": "6.8.9",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/acpi/cppc_acpi.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.9"
                  },
                  {
                    "lessThan": "6.9",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.155",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.178",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.96",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.39",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: CPPC: Suppress UBSAN warning caused by field misuse\n\nThe definition of reg-\u003eaccess_width changes depending on the\nreg-\u003espace_id type.  Type ACPI_ADR_SPACE_PLATFORM_COMM uses\naccess_width to indicate the PCC region, which can result in a UBSAN\nif the value is greater than 4.\n\nFor example:\n\n UBSAN: shift-out-of-bounds in drivers/acpi/cppc_acpi.c:1090:9\n shift exponent 32 is too large for 32-bit type \u0027int\u0027\n CPU: 61 UID: 0 PID: 1220 Comm: (udev-worker) Not tainted 7.0.10-201.fc44.aarch64 #1 PREEMPT(lazy)\n Hardware name: To be filled by O.E.M.\n Call trace:\n  ...(trimming)\n  ubsan_epilogue+0x10/0x48\n  __ubsan_handle_shift_out_of_bounds+0xdc/0x1e0\n  cpc_write+0x4d0/0x670\n  cppc_set_perf+0x18c/0x490\n  cppc_cpufreq_cpu_init+0x1c8/0x380 [cppc_cpufreq]\n  ... (trimming)\n\nLets fix this by validating the region type, as well as whether\naccess_width has a value. Then since we are returning bit_width\ndirectly for ACPI_ADR_SPACE_PLATFORM_COMM, drop the code correcting\nthe size."
          }
        ],
        "id": "CVE-2026-64512",
        "lastModified": "2026-08-17T05:17:57.400",
        "metrics": {},
        "published": "2026-07-25T10:17:37.380",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/1b1acf2dada0cc3931bb2cb9ff8832edfbee46a1"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2fb80e962029000959f651665baa4838cc92eb99"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/37f28bf8f14672dfa395994e41fd778a63f0bf5c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b54c4632946ae42f2b39ed38abd909bbf78cbcc2"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/dc066bd13c860bb27d6ace511210e18b8064c1d9"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e904596ba6dd108534ffa15e3e46b2fe245145e2"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/f29dc6132d4968e39d8fa575d1a12e2c718ce57b"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-07-28T03:00:06+00:00",
      "cve": "CVE-2026-64512",
      "id": "CVE-2026-64512",
      "initial_release_date": "2026-07-25T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ACPI: CPPC: Suppress UBSAN warning caused by field misuse",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64512.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-18T00:39:02Z",
      "cve": "CVE-2026-64512",
      "id": "CVE-2026-64512",
      "initial_release_date": "2026-07-25T15:57:59Z",
      "product_status:first_fixed": "23",
      "product_status:known_affected": "540",
      "product_status:known_not_affected": "193",
      "product_status:recommended": "111",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-64512",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-64512.json",
      "version": "12"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.