Description
Race condition in the power policy functions in policy-funcs in acpi-support before 0.142 allows local users to gain privileges via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | acpi-support | 0.142-2 | — |
| Debian 13 | acpi-support | 0.142-2 | — |
| Debian 12 | acpi-support | 0.142-2 | — |
| Debian 7 | acpi-support | 0.140-5+deb7u1 | DSA-2984-1 |
| Debian 6.0 | acpi-support | 0.137-5+deb6u1 | DLA-30-1 |
Advisories 2
- DLA-30-1 acpi-support - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-2984-1 acpi-support - security update Debian Security (DSA / DLA) · Mar 9, 2026
References
- https://bugs.launchpad.net/ubuntu/%2Bsource/acpi-support/%2Bbug/1340812
- 60319 third-party-advisory
- USN-2297-1 vendor-advisory
- DSA-2984 vendor-advisory