{"id":"CVE-2026-93114","revision":"103a9aaaf05b480ab100202dd63a19f4","records":[{"revision":"103a9aaaf05b480ab100202dd63a19f4","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93114","aliases":[],"title":"platform/surface: acpi-notify: Check ACPI companion before use","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/surface: acpi-notify: Check ACPI companion before use\n\nSince every platform driver can be forced to match a device that doesn't\nmatch its list of device IDs because of device_match_driver_override(),\nplatform drivers that rely on the existence of a device's ACPI companion\nobject should verify its presence.\n\nsan_probe() dereferences the result of ACPI_COMPANION() when installing\nthe GSBUS address space handler, so force-binding the driver to a device\nwithout an ACPI companion leads to a NULL pointer dereference.  The\ndereference was introduced when the probe function was switched from\nACPI_HANDLE() to ACPI_COMPANION().\n\nCheck the ACPI companion against NULL and return -ENODEV when it is\nmissing, like commit e4865a56d013 (\"ACPI: driver: Check ACPI_COMPANION()\nagainst NULL during probe\") does for the core ACPI platform drivers.","state":0,"publishedAt":"2026-09-17T16:11:22.463+00:00","modifiedAt":"2026-10-19T09:05:48.069+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/platform/surface/surface_acpi_notify.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"a9e10e58730432e5de840eb3ddd55c75f29341b3\",\n                            \"lessThan\": \"4faa43d4ef0b98beb6c2b77a279f4aa5d7fa2d13\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a9e10e58730432e5de840eb3ddd55c75f29341b3\",\n                            \"lessThan\": \"3855be0100efb98c26228c610db70a673611f3bd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a9e10e58730432e5de840eb3ddd55c75f29341b3\",\n                            \"lessThan\": \"f276b62f2ce1cbff7fa50a8ee5afd8fef5a60897\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a9e10e58730432e5de840eb3ddd55c75f29341b3\",\n                            \"lessThan\": \"9b6479da662c2ec4e931ed9f7228df46aa8c3766\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a9e10e58730432e5de840eb3ddd55c75f29341b3\",\n                            \"lessThan\": \"7fea5a310e3b2db24f7aafe64897e4e659ffbb7d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a9e10e58730432e5de840eb3ddd55c75f29341b3\",\n                            \"lessThan\": \"428a82d987fcd8844e8868c85582eae75b4b5c51\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a9e10e58730432e5de840eb3ddd55c75f29341b3\",\n                            \"lessThan\": \"2b3a5dabe89e330413af403246b648c1890f368f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/platform/surface/surface_acpi_notify.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.14\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.221\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/4faa43d4ef0b98beb6c2b77a279f4aa5d7fa2d13","https://git.kernel.org/stable/c/3855be0100efb98c26228c610db70a673611f3bd","https://git.kernel.org/stable/c/f276b62f2ce1cbff7fa50a8ee5afd8fef5a60897","https://git.kernel.org/stable/c/9b6479da662c2ec4e931ed9f7228df46aa8c3766","https://git.kernel.org/stable/c/7fea5a310e3b2db24f7aafe64897e4e659ffbb7d","https://git.kernel.org/stable/c/428a82d987fcd8844e8868c85582eae75b4b5c51","https://git.kernel.org/stable/c/2b3a5dabe89e330413af403246b648c1890f368f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93114","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93114","identifiers":["CVE-2026-93114"]},"retained":false,"historicalAffected":[]}],"coverage":[]}