SB20260828176 - Improper Check for Unusual or Exceptional Conditions in Linux kernel acpi riscv driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-80611)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local attacker to cause a denial of service.

The vulnerability exists due to improper handling of function tracing in acpi_idle_lpi_enter() and acpi_processor_ffh_lpi_enter() when entering an ACPI low power idle state with function tracing or Kprobes enabled. A local attacker can trigger idle-state entry on an affected system to cause a denial of service.

The issue is exposed only when function tracing or Kprobes is enabled.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/10f675902a5fc88ccfe34bb8aa37de50806b03b1
• https://git.kernel.org/stable/c/5b6165d7ec38477e8cfa41bfa464959957953822
• https://git.kernel.org/stable/c/8bbe4dd7964552f74c271c3a8d95a4331a8ab5f9
• https://git.kernel.org/stable/c/956ca5d72c76504824c8eb601879da9476973e15