ACPI Button Vulnerability in Linux Kernel Affects System Stability

CVE-2026-64013

What is CVE-2026-64013?

A vulnerability in the Linux kernel related to the ACPI button handling has been identified. The issue arises from the improper updating of the ACPI notify handler during the removal of the driver, leading to a potential leak. If an ACPI notify is triggered post-driver removal, it can cause a kernel crash, affecting system stability and performance. This issue is addressed by correctly implementing the acpi_remove_notify_handler() in the acpi_button_remove() function to prevent such leaks.

References