OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-92522

HIGH · CVSS 7.3 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the ACPI processor's handling of IOAPIC entries, specifically during the parsing of MADT and _MAT records. This flaw could lead to improper validation of record boundaries, potentially allowing for memory corruption or system instability. Organizations using Linux-based systems, particularly those leveraging ACPI for power management and hardware configuration, should prioritize addressing this issue to mitigate potential risks.

CVE
CVE-2026-92522
Severity
HIGH
CVSS
7.3
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and _MAT records directly. The MADT walk previously used a subtable's declared length to advance the cursor after only locating a generic header. The _MAT path likewise passed a generic header to the IOAPIC helper. Validate that a current record has a complete generic header, that its declared length is contained in the available record range, and that a typed IOAPIC record contains the full fixed IOAPIC body before reading its fields. Use the same relation for both MADT and _MAT provider paths.