Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length() Validate package length reading in acpi_ps_get_next_package_length().

Affected versions

Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 780f380c66b80030379bec65bb1bd09ce6f6d9fc (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before 9bc0e8c3df689765ad5161eb3aed15de8544f5ce (git); 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 through before d49c6ee08365a8596f639da46eb7e71752b0cd42 (git); 2.6.12 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.