CVE-2026-97452

A flaw was found in the Linux kernel's ACPI (Advanced Configuration and Power Interface) Component Architecture (ACPICA). When copying internal ACPI objects, the system improperly attempts to update reference counts for objects that do not maintain valid pointers. A local user capable of invoking specific ACPI methods can exploit this vulnerability to cause kernel instability, resulting in a denial of service (DoS).

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because triggering the flaw requires local access and the execution of specific ACPI methods, which typically depend on firmware interaction or elevated privileges. In standard Red Hat deployments, unprivileged users cannot directly invoke the affected ACPICA routines or manipulate internal object references. Consequently, the practical risk is minimal, with potential impact restricted to kernel instability or a localized denial of service under specific conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.