In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add validation for node in acpi_ns_build_normalized_path()
Add validation for node in acpi_ns_build_normalized_path()
to prevent use-after-free vulnerabilities.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
References 3
https://git.kernel.org/stable/c/21a73528579fcbd673b668bd27a05b658123bc1b
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/96b2b616870e46e2bc04efec03879683a0036e66
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/babb146ceb79e71f328788f1e2c8c7c224026e61
416baaa9-dc9f-4396-8d5f-8c081fb06d67