Linux Kernel ACPI PPTT Vulnerability in Atomic Context

Vulnerability

A vulnerability in the Linux kernel's ACPI PPTT handling can lead to improper behavior in atomic contexts. The issue arises because the PPTT table, when absent, is not properly accounted for, causing secondary CPUs to attempt to access cache information in a context that does not allow sleeping. This oversight can trigger a kernel error related to invalid context handling.

Impact

Exploitation of this vulnerability can cause a kernel panic by invoking a sleeping function in an invalid context, disrupting normal kernel operations and potentially leading to a system crash.

Remediation

The vulnerability has been addressed in the Linux kernel by updating the ACPI PPTT handling to check for the table's presence before attempting to access it, thereby avoiding unnecessary sleeps in atomic contexts.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.