CVE-2026-43122

kernel: ACPI: processor: Update cpuidle driver check in __acpi_processor_start()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface (ACPI) cpuidle driver. Due to an update in the __acpi_processor_start() function, a NULL pointer dereference can occur if acpi_processor_power_init() is called without a cpuidle driver. This vulnerability could allow a local attacker to trigger a system crash, leading to a denial of service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference