Linux Kernel ACPI Platform Profile Driver Initialization Vulnerability

Vulnerability

A vulnerability exists in the Linux kernel's handling of the platform profile driver on non-ACPI platforms. The driver initializes sysfs entries that require ACPI to be enabled, leading to warnings during operation. This issue arises because the initialization was recently shifted to the module's init call, without proper checks for ACPI availability.

Impact

The vulnerability causes a warning message to be generated, indicating a problem with the sysfs group creation process. This warning can be seen as a tainting of the kernel, which may have implications for debugging and system stability.

Reproduction

The vulnerability can be reproduced on a non-ACPI platform by loading the platform profile driver. This will trigger a warning about the improper initialization of sysfs entries, as the necessary ACPI support is not available.

Remediation

The vulnerability has been addressed by modifying the driver to check for ACPI availability before creating sysfs entries. Users should ensure they are running a version of the Linux kernel that includes this fix.

Added: Jul 10, 2025, 9:09 AM
Updated: Jul 10, 2025, 9:09 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.0
exploitability
4.3
remediation
0.0
relevance
0.2
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.