Vulnerability in Linux Kernel ACPICA Affects Linux Products

CVE-2025-38386

What is CVE-2025-38386?

A vulnerability in the Linux kernel's ACPICA component has been identified, wherein a platform firmware update that modified method parameters inadvertently led to a use-after-free condition, causing crashes. This issue arises due to a mismatch of expected method arguments. ACPICA now refrains from evaluating methods when the caller supplies insufficient arguments, enhancing the system's stability and security.

References