CVE-2025-71118

A NULL pointer dereference vulnerability was found in the ACPICA subsystem of the Linux kernel. When walking the ACPI namespace in acpi_ns_get_next_node(), the function accesses parent_node without checking if start_node is NULL. On systems with malformed DSDT tables (such as Honor Magicbook 14 Pro), this causes a kernel crash during boot when the ACPI subsystem attempts to parse the namespace.

This vulnerability affects systems with malformed ACPI DSDT tables where the namespace structure is corrupted. The issue was discovered on Honor Magicbook 14 Pro hardware with BIOS version 1.13. The crash occurs during early boot ACPI initialization and prevents the system from starting. This is triggered by faulty firmware rather than attacker-controlled input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.