SB2026091876 - Infinite loop in Linux kernel acpi riscv driver

Description

This security bulletin contains information about 1 vulnerability.

1) Infinite loop (CVE-ID: CVE-2026-93132)

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper loop control in riscv_acpi_add_prt_dep() when processing ACPI PCI routing table entries that trigger an error condition. A local user can trigger an error condition that causes the same entry to be processed repeatedly to cause a denial of service.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3a56321d0aceee2a0bd80d23366401c131ff8350
• https://git.kernel.org/stable/c/3fd86a5d6facb6618f63a76d499f28007cef878f
• https://git.kernel.org/stable/c/41652ca8c6ff2b77b9780cbbb2f20f1551b9ff80
• https://git.kernel.org/stable/c/c9729ced165d6c5b57d99141b6632bb8711efec9