CVE-2026-97450

A flaw was found in the Linux kernel's ACPICA (Advanced Configuration and Power Interface Component Architecture) subsystem. The event handler routines fail to validate object types before reading handler fields in functions such as acpi_ev_has_default_handler(). A local user or environment with manipulated ACPI tables could trigger an invalid memory access, causing a kernel crash and resulting in a denial of service (DoS).

This vulnerability is rated with a Low severity impact on Red Hat Enterprise Linux because exploitation requires local access or interaction with specific ACPI tables, restricting the blast radius primarily to localized denial of service. Under standard enterprise deployments, ACPI tables and event handlers are loaded and managed by trusted system firmware during boot, preventing unprivileged users from manipulating these structures directly. Consequently, this issue presents minimal operational risk to running systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.