Use-after-free in Linux kernel - CVE-2026-97455

Vulnerability details

The vulnerability allows a local user to trigger a use-after-free condition.

The vulnerability exists due to use-after-free in acpi_ds_terminate_control_method() when terminating a control method whose return value is a ref_of reference. A local user can cause a control method to return a ref_of reference to trigger a use-after-free condition.

The affected reference can point to a method local variable or argument.

Affected software

How to mitigate CVE-2026-97455

External References

• https://git.kernel.org/stable/c/945e87267cfd90937b3c637f87324cbb56998b72
• https://git.kernel.org/stable/c/ef5a8d939c1e5b36e75450bbb5b6348faff4dcf3
• https://git.kernel.org/stable/c/fe7b3d3b7490c2c0119f2d84fa33996dcbc71042

Related Security Bulletins

• Use-after-free in Linux kernel acpi acpica driver