CVE-2026-89588
- Source
- https://cve.org/CVERecord?id=CVE-2026-89588
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89588.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-89588
- Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
openSUSE (1)
UBUNTU (1)
- Related
- Published
- 2026-09-11T19:44:52Z
- Modified
- 2026-10-28T02:31:07Z
- Severity
-
- 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- ACPI: APEI: GHES: fix ARM section length accounting after header
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ACPI: APEI: GHES: fix ARM section length accounting after header
In ghes_handle_arm_hw_error(), after skipping the cper_sec_proc_arm header with (err + 1), the remaining length was reduced by sizeof(err) (pointer size) instead of sizeof(*err) (structure size).
That overestimates the bytes left for cper_arm_err_info records and can let the parser read past the CPER section when err_info_num is large enough relative to error_data_length.
Use sizeof(*err) so the length accounting matches the pointer advance and the earlier sizeof(*err) size check.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89588.json" }- References
-
- https://git.kernel.org/stable/c/452eb28e03015abec6d4bf6488ee567706ade4e1
- https://git.kernel.org/stable/c/5ff385e9403e87ae33f65b8c38698d3b1e92cfde
- https://git.kernel.org/stable/c/903308ea40adf0577d82eab69882faf8836326ce
- https://git.kernel.org/stable/c/b48b613073c3d652cb1823c15d16f7067cf4cee4
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89588.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-89588
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced242c652849d979d0133c315a42d9acea0ff88390Fixed5ff385e9403e87ae33f65b8c38698d3b1e92cfde
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced136093ba4161e0080088abff48273f6830a47766Fixed452eb28e03015abec6d4bf6488ee567706ade4e1
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced87880af2d24e62a84ed19943dbdd524f097172f2Fixedb48b613073c3d652cb1823c15d16f7067cf4cee4Fixed903308ea40adf0577d82eab69882faf8836326ce
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.12.75Fixed6.12.109
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.18.16Fixed6.18.50
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.19.6Fixed6.20
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceddb103b8bd3a4aca69b1b5fe8831a6ed75ac4b3bd
Affected versions
v6.*
v6.12.100
v6.12.101
v6.12.102
v6.12.103
v6.12.104
v6.12.105
v6.12.106
v6.12.107
v6.12.108
v6.12.75
v6.12.76
v6.12.77
v6.12.78
v6.12.79
v6.12.80
v6.12.81
v6.12.82
v6.12.83
v6.12.84
v6.12.85
v6.12.86
v6.12.87
v6.12.88
v6.12.89
v6.12.90
v6.12.91
v6.12.92
v6.12.93
v6.12.94
v6.12.95
v6.12.96
v6.12.97
v6.12.98
v6.12.99
v6.18.16
v6.18.17
v6.18.18
v6.18.19
v6.18.20
v6.18.21
v6.18.22
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.18.27
v6.18.28
v6.18.29
v6.18.30
v6.18.31
v6.18.32
v6.18.33
v6.18.34
v6.18.35
v6.18.36
v6.18.37
v6.18.38
v6.18.39
v6.18.40
v6.18.41
v6.18.42
v6.18.43
v6.18.44
v6.18.45
v6.18.46
v6.18.47
v6.18.48
v6.18.49
v6.19.10
v6.19.11
v6.19.12
v6.19.13
v6.19.14
v6.19.6
v6.19.7
v6.19.8
v6.19.9