ACPI Vulnerability in Linux Kernel Affecting Multiple Platform Drivers

CVE-2026-64227

What is CVE-2026-64227?

A vulnerability in the Linux kernel affects multiple platform drivers responsible for handling core ACPI devices. Due to the implementation of device_match_driver_override(), these drivers can be forced to match devices that do not align with their designated device IDs. This situation necessitates that platform drivers verify the presence of a device's ACPI companion object. To address this, necessary checks for ACPI_COMPANION() or ACPI_HANDLE() against NULL have been introduced in 13 platform drivers. Additionally, modifications ensure that, in cases where the ACPI companion is absent, the ACPI thermal zone driver returns the -ENODEV error code for uniformity across the drivers.

References