Listen to this Post
How the CVE Works:
The vulnerability is a kernel memory leak in the ACPI Component Architecture (ACPICA). During early system boot, the Linux kernel initializes the ACPI subsystem to handle power management and hardware configuration. This process involves creating slab caches with `kmem_cache_create()` for ACPI parser objects (“Acpi-Parse” and “Acpi-ParseExt” caches).
If the ACPI interpreter fails to start due to an error (an “early abort” condition), the kernel’s cleanup routine `acpi_terminate()` is called. This routine attempts to destroy all ACPI-related slab caches via acpi_ut_delete_caches().
However, the error handling path is flawed. When the interpreter fails, certain allocated parse tree objects (nodes from the “Acpi-Parse” and “Acpi-ParseExt” caches) are not released back to their respective slab caches before the destruction call. The `kmem_cache_destroy()` function then fails because these caches still contain active objects, resulting in the leak.
The leaked memory is non-reclaimable kernel memory. Repeated triggering of this condition, such as through forced ACPI initialization failures, can lead to a gradual exhaustion of kernel memory resources, potentially causing system instability or a denial-of-service (DoS).
DailyCVE Form:
Platform: Linux Kernel
Version: 4.12+
Vulnerability: ACPI Cache Leak
Severity: Medium
Date: 2025-07-10
Prediction: Fixed Q3 2025
What Undercode Say:
`dmesg | grep -E “Acpi.cache|slab.objects”`
`cat /proc/slabinfo | grep -i acpi`
`sudo journalctl -k –grep=”kmem_cache_destroy”`
How Exploit:
Local attacker triggers repeated ACPI initialization failures via crafted hardware or kernel parameters, causing gradual kernel memory exhaustion and potential system crash (Denial-of-Service).
Protection from this CVE
Apply kernel patch containing ACPICA commit 8829e70e. Update to a fixed kernel version from your distribution vendor. For critical systems, test ACPI initialization stability.
Impact:
Non-reclaimable kernel memory leak. Gradual system resource exhaustion. Potential denial-of-service (system instability/crash). Kernel warning logs (kmem_cache_destroy: Slab cache still has objects).
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
