Use-after-free in Linux kernel - CVE-2026-97448

Vulnerability details

The vulnerability allows a local user to trigger a use-after-free condition.

The vulnerability exists due to improper validation of a namespace node in acpi_ns_build_normalized_path() when processing an invalid ACPI namespace node. A local user can cause the function to process an invalid namespace node to trigger a use-after-free condition.

Affected software

How to mitigate CVE-2026-97448

External References

• https://git.kernel.org/stable/c/21a73528579fcbd673b668bd27a05b658123bc1b
• https://git.kernel.org/stable/c/96b2b616870e46e2bc04efec03879683a0036e66
• https://git.kernel.org/stable/c/babb146ceb79e71f328788f1e2c8c7c224026e61

Related Security Bulletins

• Use-after-free in Linux kernel acpi acpica driver