CVE-2026-93115

Source
https://cve.org/CVERecord?id=CVE-2026-93115
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93115.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93115
Downstream
Published
2026-09-17T16:11:23Z
Modified
2026-09-19T03:47:27Z
Summary
platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL
Details

In the Linux kernel, the following vulnerability has been resolved:

platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL

Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence.

mlxbf_pmc_probe() passes the result of ACPI_COMPANION() to acpi_device_hid(), which dereferences it, so force-binding the driver to a device without an ACPI companion leads to a NULL pointer dereference.

Accordingly, add a requisite ACPI_COMPANION() check against NULL to the mlxbf-pmc driver and return -ENODEV when the companion is missing.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93115.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1a218d312e65ec396b2739056a8ea78493015f21
Fixed
950d8e8375f3ff4787de51b7bdf8dd23a3ad6547
Fixed
fdfb736282b9665c0169df0c4152ec91fdea2767
Fixed
bf1e0cc5cc1d4e71b699fc98cc9198ead0ed53e0
Fixed
a75b84119e56fc34b0f1403f3b93d357a55dabb6
Fixed
71ba8b6e28f7a83b724036f5de07e03bb5473286
Fixed
d25dd08268aeaceb485189aaa84aa6d68a460291
Fixed
c38cce70adef874c2a7b5132c14d6c221401deff

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93115.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.221
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.188
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93115.json"