Description
In the Linux kernel, the following vulnerability has been resolved:
ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
After commi f132e089fe89 ("ACPI: processor: Fix NULL-pointer dereference
in acpi_processor_errata_piix4()"), device pointers may be dereferenced
after dropping references to the device objects pointed to by them,
which may cause a use-after-free to occur.
Moreover, debug messages about enabling the errata may be printed
if the errata flags corresponding to them are unset.
Address all of these issues by moving message printing to the points
in the code where the errata flags are set.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.15.202 – < 5.15.203, 6.1.165 – < 6.1.167, 6.6.128 – < 6.6.130, 6.12.75 – < 6.12.78, 6.18.16 – < 6.18.20, 6.19.6 – < 6.19.10 | 5.15.203 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.19.10-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-riscv +15 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.55.1.150700.17.33.1 | SUSE-SU-2026:2238-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.2 | kernel-syms +1 | 6.12.0-160000.33.1 | SUSE-SU-2026:21834-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_15 | 1-150700.15.3.1 | SUSE-SU-2026:2238-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.328.1 | SUSE-SU-2026:4282-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_87 | 1-8.5.1 | SUSE-SU-2026:4282-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.20-20.229 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-1681, ALAS2023-2026-1596, ALAS2023-2026-1594 |
| Amazon Linux 2023 | perf +14 | 1:6.1.168-202.320.amzn2023 | ALAS2023-2026-1681 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.79-101.147.amzn2023 | ALAS2023-2026-1594 |
| Amazon Linux 2023 | perf6.18 +14 | 1:6.18.20-20.229.amzn2023 | ALAS2023-2026-1596 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-202.76.4.1.el10uek | ELSA-2026-50372, ELSA-2026-50260 |
Advisories 9
- WID-SEC-2026-0985 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- SUSE-SU-2026:4282-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Sep 23, 2026
- ALAS2023-2026-1681 Important: kernel security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 29, 2026
- SUSE-SU-2026:21834-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- ELSA-2026-50372 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 2, 2026
- SUSE-SU-2026:2238-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 1, 2026
- ALAS2023-2026-1594 Important: kernel6.12 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 16, 2026
- ALAS2023-2026-1596 Important: kernel6.18 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 16, 2026
- ELSA-2026-50260 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 10, 2026
References
- https://git.kernel.org/stable/c/68408e8f9e366ad9850a66ac65cb569f13bf6cd4
- https://git.kernel.org/stable/c/2e369ba9eb7b8a06e9cc35a3e7fe73e59272f8c2
- https://git.kernel.org/stable/c/edf4c2aaee08e8fd503fbae705c801e92a0b55d7
- https://git.kernel.org/stable/c/e0c470049344e9346fff79d7e2362212c216665e
- https://git.kernel.org/stable/c/98473309a36acc271009b85e0bb53a4c0dddf5c2
- https://git.kernel.org/stable/c/8583f62259e1b315d5239371adfb36939cdab741
- https://git.kernel.org/stable/c/bf504b229cb8d534eccbaeaa23eba34c05131e25