In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Refuse to evaluate a method if arguments are missing
As reported in [1], a platform firmware update that increased the number of method parameters and forgot to update a least one of its callers, caused ACPICA to crash due to use-after-free.
Since this a result of a clear AML issue that arguably cannot be fixed up by the interpreter (it cannot produce missing data out of thin air), address it by making ACPICA refuse to evaluate a method if the caller attempts to pass fewer arguments than expected to it.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d547779e72cea9865b732cd45393c4cd02b3598e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-029484d0",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2219e49857ffd6aea1b1ca5214d3270f84623a16",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-1bb3474b",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49d224d1830c46e20adce2a239c454cdab426f1",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-1f8eee37",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49d224d1830c46e20adce2a239c454cdab426f1",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-24c1b674",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-4096613b",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18ff4ed6a33a7e3f2097710eacc96bea7696e803",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-43701ddc",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6fcab2791543924d438e7fa49276d0998b0a069f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-4dec9449",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6fcab2791543924d438e7fa49276d0998b0a069f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-54c772d4",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2219e49857ffd6aea1b1ca5214d3270f84623a16",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-6742b582",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18ff4ed6a33a7e3f2097710eacc96bea7696e803",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-80ab1573",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9e4da550ae196132b990bd77ed3d8f2d9747f87",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-8a83e2ed",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9e4da550ae196132b990bd77ed3d8f2d9747f87",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-abe7449a",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab1e8491c19eb2ea0fda81ef28e841c7cb6399f5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-bb295781",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4305d936abde795c2ef6ba916de8f00a50f64d2d",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-c7f198de",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"68557803444019646652693259758648511486",
"277435720596750721348372355388971527757",
"36230675680314663207693634842679921796"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4305d936abde795c2ef6ba916de8f00a50f64d2d",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-d172f4a0",
"signature_type": "Line",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c"
}
},
{
"digest": {
"length": 1966.0,
"function_hash": "1087527877834612381539485690964021994"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d547779e72cea9865b732cd45393c4cd02b3598e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2025-38386-d22704e4",
"signature_type": "Function",
"target": {
"file": "drivers/acpi/acpica/dsmethod.c",
"function": "acpi_ds_call_control_method"
}
}
]