CVE-2025-71118
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
14/01/2026
Last modified:
25/03/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ACPICA: Avoid walking the Namespace if start_node is NULL<br />
<br />
Although commit 0c9992315e73 ("ACPICA: Avoid walking the ACPI Namespace<br />
if it is not there") fixed the situation when both start_node and<br />
acpi_gbl_root_node are NULL, the Linux kernel mainline now still crashed<br />
on Honor Magicbook 14 Pro [1].<br />
<br />
That happens due to the access to the member of parent_node in<br />
acpi_ns_get_next_node(). The NULL pointer dereference will always<br />
happen, no matter whether or not the start_node is equal to<br />
ACPI_ROOT_OBJECT, so move the check of start_node being NULL<br />
out of the if block.<br />
<br />
Unfortunately, all the attempts to contact Honor have failed, they<br />
refused to provide any technical support for Linux.<br />
<br />
The bad DSDT table&#39;s dump could be found on GitHub [2].<br />
<br />
DMI: HONOR FMB-P/FMB-P-PCB, BIOS 1.13 05/08/2025<br />
<br />
[ rjw: Subject adjustment, changelog edits ]
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 2.6.12.1 (including) | 5.10.248 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.198 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 6.1.160 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.6.120 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.12.64 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.18.3 (excluding) |
| cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/0d8bb08126920fd4b12dbf32d9250757c9064b36
- https://git.kernel.org/stable/c/1bc34293dfbd266c29875206849b4f8e8177e6df
- https://git.kernel.org/stable/c/7f9b951ed11842373851dd3c91860778356d62d3
- https://git.kernel.org/stable/c/9d6c58dae8f6590c746ac5d0012ffe14a77539f0
- https://git.kernel.org/stable/c/b84edef48cc8afb41150949a87dcfa81bc95b53e
- https://git.kernel.org/stable/c/ecb296286c8787895625bd4c53e9478db4ae139c
- https://git.kernel.org/stable/c/f91dad0a3b381244183ffbea4cec5a7a69d6f41e



