CVE-2026-93114 platform/surface: acpi-notify: Check ACPI companion before use
A local attacker with high privileges can force-bind a driver to a device lacking an ACPI companion, causing a kernel NULL pointer dereference and system crash.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-93114?
CVE-2026-93114 is a vulnerability in Linux, published on 17 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
platform/surface: acpi-notify: Check ACPI companion before use
Since every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), platform drivers that rely on the existence of a device's ACPI companion object should verify its presence.
san_probe() dereferences the result of ACPI_COMPANION() when installing the GSBUS address space handler, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. The dereference was introduced when the probe function was switched from ACPI_HANDLE() to ACPI_COMPANION().
Check the ACPI companion against NULL and return -ENODEV when it is missing, like commit e4865a56d013 ("ACPI: driver: Check ACPI_COMPANION() against NULL during probe") does for the core ACPI platform drivers.
Which versions are affected by CVE-2026-93114?
How do I fix CVE-2026-93114?
Apply the vendor's patch.
Is CVE-2026-93114 being exploited?
There is no known exploitation of CVE-2026-93114 in the wild and no public exploit code.
Sources
Also known as AZL-102186, BELL-CVE-2026-93114, DEBIAN-CVE-2026-93114, GHSA-fmfr-wc4p-75cj, UBUNTU-CVE-2026-93114.