Linux Kernel ACPICA Method Evaluation Vulnerability Due to Missing Arguments

A vulnerability in the Linux kernel's ACPICA component has been addressed, which involved improper evaluation of methods when arguments were missing. This issue arose after a platform firmware update increased the number of required parameters but failed to update at least one of the method callers. The discrepancy led to a use-after-free error, causing ACPICA to crash. The vulnerability has been resolved by modifying ACPICA to reject method evaluations that do not meet the expected argument requirements.

Impact

The vulnerability could lead to a use-after-free condition, causing a crash in the ACPICA component of the Linux kernel.