Vulnerability in Linux Kernel Affects EFI Runtime Calls

CVE-2026-64183

What is CVE-2026-64183?

A vulnerability has been identified in the Linux kernel related to the allocation of a runtime workqueue before ACPI initialization. The problem arises when ACPI PRM calls are processed before the necessary initialization is completed, which can lead to NULL pointer dereferences and potential faults. This issue highlights the importance of proper initialization ordering and the need for careful handling of EFI runtime calls in connection with firmware accesses. The kernel maintains stability by ensuring that these runtime calls are accessible across the relevant initialization phases.

References