PT-2026-64733 · Linux · Linux

CVE-2026-64512

·

Published

2026-07-25

·

Updated

2026-07-25

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
The definition of reg->access width changes depending on the reg->space id type. Type ACPI ADR SPACE PLATFORM COMM uses access width to indicate the PCC region, which can result in a UBSAN if the value is greater than 4.
For example:
UBSAN: shift-out-of-bounds in drivers/acpi/cppc acpi.c:1090:9 shift exponent 32 is too large for 32-bit type 'int' CPU: 61 UID: 0 PID: 1220 Comm: (udev-worker) Not tainted 7.0.10-201.fc44.aarch64 #1 PREEMPT(lazy) Hardware name: To be filled by O.E.M. Call trace: ...(trimming) ubsan epilogue+0x10/0x48 ubsan handle shift out of bounds+0xdc/0x1e0 cpc write+0x4d0/0x670 cppc set perf+0x18c/0x490 cppc cpufreq cpu init+0x1c8/0x380 [cppc cpufreq] ... (trimming)
Lets fix this by validating the region type, as well as whether access width has a value. Then since we are returning bit width directly for ACPI ADR SPACE PLATFORM COMM, drop the code correcting the size.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-64512

Affected Products

Linux