ACPI: APEI: GHES: fix ARM section length accounting after header (Linux Linux)

CVE-2026-89588
HIGH 8.4

At a glance

Source
NVD
EPSS
EPSS 0.18 % · percentile 8 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Received

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In ghes_handle_arm_hw_error(), after skipping the cper_sec_proc_arm header with (err + 1), the remaining length was reduced by sizeof(err) (pointer size) instead of sizeof(*err) (structure size). That overestimates the bytes left for cper_arm_err_info records and can let the parser read past the CPER section when err_info_num is large enough relative to error_data_length. Use sizeof(*err) so the length accounting matches the pointer advance and the earlier sizeof(*err) size check.

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected 242c652849d979d0133c315a42d9acea0ff88390 < 5ff385e9403e87ae33f65b8c38698d3b1e92cfde ; affected 136093ba4161e0080088abff48273f6830a47766 < 452eb28e03015abec6d4bf6488ee567706ade4e1 ; affected 87880af2d24e62a84ed19943dbdd524f097172f2 < b48b613073c3d652cb1823c15d16f7067cf4cee4 ; affected 87880af2d24e62a84ed19943dbdd524f097172f2 < 903308ea40adf0577d82eab69882faf8836326ce ; affected db103b8bd3a4aca69b1b5fe8831a6ed75ac4b3bd ; affected 6.12.75 < 6.12.109
Linux · Linuxaffected 7.0 ; unaffected 0 < 7.0 ; unaffected 6.12.109 ≤ 6.12.* ; unaffected 6.18.50 ≤ 6.18.* ; unaffected 7.2.4 ≤ 7.2.* ; unaffected 7.3 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD