Answer in brief
CVE-2026-92522 records a Unknown severity vulnerability in ACPI: processor: validate MADT IOAPIC entry bounds. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <5601bd81bc290a724ed47797d22c16cba4d7ed9f || >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <ff82e3374e9103d046b2a82f4315d9a422ff097d || >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <2a5520065e76000f8c979d3d7b3d861ccaaecf1e || >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <8e67b58c04990817ac2dbf8ae03353be6a358cd4 || >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <74d84320f8e37955eb286a7777843d554e6e75b2 || >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <4d8ecaa332c163f2b44aa5027bf061950b71b5f3 || >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <355bee5f11acb116cd256588631b4028ca562646 || >=ecf5636dcd59cd5508641f995cc4c2bafedbb995 <2c50ffdc73f3a70d745d249f509fc290754121e6 | 5601bd81bc290a724ed47797d22c16cba4d7ed9f, ff82e3374e9103d046b2a82f4315d9a422ff097d, 2a5520065e76000f8c979d3d7b3d861ccaaecf1e, 8e67b58c04990817ac2dbf8ae03353be6a358cd4, 74d84320f8e37955eb286a7777843d554e6e75b2, 4d8ecaa332c163f2b44aa5027bf061950b71b5f3, 355bee5f11acb116cd256588631b4028ca562646, 2c50ffdc73f3a70d745d249f509fc290754121e6 |
| Linux/Linuxgeneric | 4.0 | Not reported |
Published upstream
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 17, 2026
In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and _MAT records directly. The MADT walk previously used a subtable's declared length to advance the cursor after only locating a generic header. The _MAT path likewise passed a generic header to the IOAPIC helper. Validate that a current record has a complete generic header, that its declared length is contained in the available record range, and that a typed IOAPIC record contains the full fixed IOAPIC body before reading its fields. Use the same relation for both MADT and _MAT provider paths.
Quoted source text, attributed separately from HOL analysis.