Strix
63.5K

CVE-2026-93115

Unknown

Last modified

CVE-2026-93115 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence. mlxbf_pmc_probe() passes the result of ACPI_COMPANION() to acpi_device_hid(), which dereferences it, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. Accordingly, add a requisite ACPI_COMPANION() check against NULL to the mlxbf-pmc driver and return -ENODEV when the companion is missing..

Description

In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence. mlxbf_pmc_probe() passes the result of ACPI_COMPANION() to acpi_device_hid(), which dereferences it, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. Accordingly, add a requisite ACPI_COMPANION() check against NULL to the mlxbf-pmc driver and return -ENODEV when the companion is missing.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1a218d312e65ec396b2739056a8ea78493015f21, < 950d8e8375f3ff4787de51b7bdf8dd23a3ad6547; >= 1a218d312e65ec396b2739056a8ea78493015f21, < fdfb736282b9665c0169df0c4152ec91fdea2767; >= 1a218d312e65ec396b2739056a8ea78493015f21, < bf1e0cc5cc1d4e71b699fc98cc9198ead0ed53e0; >= 1a218d312e65ec396b2739056a8ea78493015f21, < a75b84119e56fc34b0f1403f3b93d357a55dabb6; >= 1a218d312e65ec396b2739056a8ea78493015f21, < 71ba8b6e28f7a83b724036f5de07e03bb5473286; >= 1a218d312e65ec396b2739056a8ea78493015f21, < d25dd08268aeaceb485189aaa84aa6d68a460291; >= 1a218d312e65ec396b2739056a8ea78493015f21, < c38cce70adef874c2a7b5132c14d6c221401deff
LinuxLinux5.11

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93115?
In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence. mlxbf_pmc_probe() passes the result of ACPI_COMPANION() to acpi_device_hid(), which dereferences it, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference. Accordingly, add a requisite ACPI_COMPANION() check against NULL to the mlxbf-pmc driver and return -ENODEV when the companion is missing.
How severe is CVE-2026-93115?
Severity scoring for CVE-2026-93115 is pending analysis.
How do I fix CVE-2026-93115?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93115?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST