# CVE-2026-97455

Use-after-free in Linux ACPI interpreter enabling kernel memory corruption.

- Page: https://www.vulneraibility.com/cve/CVE-2026-97455
- CVSS: 8.4
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.14% (percentile 3.4)
- Published: 2026-09-24

## Affected versions

- Linux: affected >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and < fe7b3d3b7490c2c0119f2d84fa33996dcbc71042; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and < ef5a8d939c1e5b36e75450bbb5b6348faff4dcf3; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and < 945e87267cfd90937b3c637f87324cbb56998b72; < 6.12.111; < 6.18.53; fixed in >= 6.12.111 and <= 6.12.*, >= 6.18.53 and <= 6.18.*, >= 7.2 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Local or guest attacker can trigger kernel memory corruption via crafted ACPI methods/tables, enabling privilege escalation or kernel crash (DoS).

## Action

Immediate action required

## Recommendation

Upgrade to patched kernel, apply vendor updates and reboot affected hosts.

## References

- [other] https://git.kernel.org/stable/c/460aed7b408508a2c28ca4fdd8d90a82bb4005aa
- [other] https://git.kernel.org/stable/c/3855d8992f5a88b033925cc4f6aef7a485f326cb
- [other] https://git.kernel.org/stable/c/2793b1c38f0053fd9b119ce4607dd056eb05d382
- [other] https://git.kernel.org/stable/c/63ca6f67816a229e07a08cac4bef1b3858abde66
- [other] https://git.kernel.org/stable/c/fe7b3d3b7490c2c0119f2d84fa33996dcbc71042
- [other] https://git.kernel.org/stable/c/ef5a8d939c1e5b36e75450bbb5b6348faff4dcf3
- [other] https://git.kernel.org/stable/c/945e87267cfd90937b3c637f87324cbb56998b72

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.