VDB

DEBIAN-CVE-2025-38386

DEBIAN-CVE-2025-38386 PUBLISHED CVSS 5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platform firmware update that increased the number of method parameters and forgot to update a least one of its callers, caused ACPICA to crash due to use-after-free. Since this a result of a clear AML issue that arguably cannot be fixed up by the interpreter (it cannot produce missing data out of thin air), address it by making ACPICA refuse to evaluate a method if the caller attempts to pass fewer arguments than expected to it.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:12linux6.1.76-1, 0, 6.1.106-1
Debian:13linux0
Debian:14linux0

Timeline

  • Jul 25, 2025 CVE Published
  • Oct 16, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›