Strix
74.8K

CVE-2026-97451

HIGHCVSS 8.4/10EPSS 0.14%

Last modified

CVE-2026-97451 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy().. EPSS estimates a 0.14% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy().

Metrics

CVSS 3.1
8.4/10

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.14%

2.8th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6da963ed4c3de0963c23809af3194323328080d2; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e539003886b34c8109574820b9ba67f0dbe62a12; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 9010ad440f970e684324d507510415a67bc125e4; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 4532c9cf006bb6323957897455b6a5ab45957a19; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d0d89f2e16a874e0f8fb17045da293e8bedf8b21; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < b96401812cbfbb4803faabeefa1f20b8562268b3; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 0e2021f49e64b3c8a9aa880d0c62a218bfe147ce
LinuxLinux2.6.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-97451?
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy().
How severe is CVE-2026-97451?
CVE-2026-97451 has a CVSS score of 8.4/10 (HIGH severity). The EPSS model estimates a 0.14% probability of exploitation in the next 30 days.
How do I fix CVE-2026-97451?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-97451?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST