https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 10:00:12 +0000 https://vulnerability.circl.lu/vuln/cve-2026-93114 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>platform/surface: acpi-notify: Check ACPI companion before use</p> <p>Since every platform driver can be forced to match a device that doesn&#39;t match its list of device IDs because of device_match_driver_override(), platform drivers that rely on the existence of a device&#39;s ACPI companion object should verify its presence.</p> <p>san_probe() dereferences the result of ACPI_COMPANION() when installing the GSBUS address space handler, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. The dereference was introduced when the probe function was switched from ACPI_HANDLE() to ACPI_COMPANION().</p> <p>Check the ACPI companion against NULL and return -ENODEV when it is missing, like commit e4865a56d013 (&#34;ACPI: driver: Check ACPI_COMPANION() against NULL during probe&#34;) does for the core ACPI platform drivers.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>platform/surface: acpi-notify: Check ACPI companion before use</p> <p>Since every platform driver can be forced to match a device that doesn&#39;t match its list of device IDs because of device_match_driver_override(), platform drivers that rely on the existence of a device&#39;s ACPI companion object should verify its presence.</p> <p>san_probe() dereferences the result of ACPI_COMPANION() when installing the GSBUS address space handler, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. The dereference was introduced when the probe function was switched from ACPI_HANDLE() to ACPI_COMPANION().</p> <p>Check the ACPI companion against NULL and return -ENODEV when it is missing, like commit e4865a56d013 (&#34;ACPI: driver: Check ACPI_COMPANION() against NULL during probe&#34;) does for the core ACPI platform drivers.</p> https://vulnerability.circl.lu/vuln/cve-2026-93114