CVE-2026-92522 (CVSS 7.3)

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and _MAT records directly. The MADT walk previously used a subtable's declared length to advance the cursor after only locating a generic header. The _MAT path likewise passed a generic header to the IOAPIC helper. Validate that a current record has a complete generic header, that its declared length is contained in the available record range, and that a typed IOAPIC record contains the full fixed IOAPIC body before reading its fields. Use the same relation for both MADT and _MAT provider paths.

Is your site exposed to CVE-2026-92522?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.3

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

EPSS — Exploit Prediction

0.0014

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/2a5520065e76000f8c979d3d7b3d861ccaaecf1e https://git.kernel.org/stable/c/2c50ffdc73f3a70d745d249f509fc290754121e6 https://git.kernel.org/stable/c/355bee5f11acb116cd256588631b4028ca562646 https://git.kernel.org/stable/c/4d8ecaa332c163f2b44aa5027bf061950b71b5f3 https://git.kernel.org/stable/c/5601bd81bc290a724ed47797d22c16cba4d7ed9f https://git.kernel.org/stable/c/74d84320f8e37955eb286a7777843d554e6e75b2 https://git.kernel.org/stable/c/8e67b58c04990817ac2dbf8ae03353be6a358cd4 https://git.kernel.org/stable/c/ff82e3374e9103d046b2a82f4315d9a422ff097d

Frequently Asked Questions

What is CVE-2026-92522? +

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: validate MADT IOAPIC entry bounds The IOAPIC hotplug lookup parses both MADT and _MAT records directly. The MADT walk previously used a subtable's declared length to advance the cursor after only locating a generic header. The _MAT path likewise passed a generic header to the IOAPIC helper. Validate that a current record has a complete generic header, that its declared length is contained in the available record range, and that a typed IOAPIC record contains the full fixed IOAPIC body before reading its fields. Use the same relation for both MADT and _MAT provider paths. It has a CVSS v3.1 base score of 7.3 (HIGH).

How severe is CVE-2026-92522? +

CVE-2026-92522 has a CVSS v3.1 score of 7.3 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0014, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-92522? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-92522