CVE-2026-97456 ACPICA: Fix condition check in acpi_ps_parse_loop()
An out-of-bounds access in the Linux kernel's ACPICA parser allows local attackers to cause a denial of service or potentially execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-97456?
CVE-2026-97456 is a memory corruption vulnerability in Linux, published on 24 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix condition check in acpi_ps_parse_loop()
Fix condition check for AML_ELSE_OP in acpi_ps_parse_loop() to prevent out-of-bounds access.
Which versions are affected by CVE-2026-97456?
How do I fix CVE-2026-97456?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-97456 being exploited?
There is no known exploitation of CVE-2026-97456 in the wild and no public exploit code.
Sources
Also known as AZL-103691, BELL-CVE-2026-97456, DEBIAN-CVE-2026-97456, GHSA-fr53-vg86-f844, UBUNTU-CVE-2026-97456.