CVE-2026-23062

MEDIUM EPSS 2.3%
Published Feb 4, 20264mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 4, 2026 4mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro The GET_INSTANCE_ID macro that caused a kernel panic when accessing sysfs attributes: 1. Off-by-one error: The loop condition used '<=' instead of '<', causing access beyond array bounds. Since array indices are 0-based and go from 0 to instances_count-1, the loop should use '<'. 2. Missing NULL check: The code dereferenced attr_name_kobj->name without checking if attr_name_kobj was NULL, causing a null pointer dereference in min_length_show() and other attribute show functions. The panic occurred when fwupd tried to read BIOS configuration attributes: Oops: general protection fault [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:min_length_show+0xcf/0x1d0 [hp_bioscfg] Add a NULL check for attr_name_kobj before dereferencing and corrects the loop boundary to match the pattern used elsewhere in the driver.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel*≥6.6  –  <6.6.122
linuxlinux_kernel*≥6.7  –  <6.12.68
linuxlinux_kernel*≥6.13  –  <6.18.8
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/193922a23d7294085a47d7719fdb7d66ad0a236f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/25150715e0b049b99df664daf05dab12f41c3e13
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb5ff1025c92117d5d1cc728bcfa294abe484da1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eba49c1dee9c5e514ca18e52c545bba524e8a045
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/193922a23d7294085a47d7719fdb7d66ad0a236f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/25150715e0b049b99df664daf05dab12f41c3e13
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eb5ff1025c92117d5d1cc728bcfa294abe484da1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/eba49c1dee9c5e514ca18e52c545bba524e8a045
    Patch