Bug 2536341 (CVE-2026-93132)

Summary: CVE-2026-93132 kernel: ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: low Docs Contact:
Priority: low    
Version: unspecifiedCC: akhatavk, aos-team-art-private, asdas, dpaolell, jdelft, jupierce, lgarciaa, mbiarnes, ppalepu, ppostler, prdhamdh, rhel-process-autobot, sghai, sidsharm, suppawar, vlaad, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface (ACPI) implementation for RISC-V architectures. Specifically, the `riscv_acpi_add_prt_dep()` function contains a loop that incorrectly handles error conditions. This can cause the loop to skip necessary entry pointer updates, leading to improper processing of ACPI entries. Such an issue could potentially result in system instability or unexpected operational behavior.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-09-17 17:28:21 UTC 
In the Linux kernel, the following vulnerability has been resolved:

ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling

The loop in riscv_acpi_add_prt_dep() includes error conditions that are
handled in a dubious - if not outright wrong - way, by continuining the
loop (which skips and misses the entry pointer update to point to the next
entry).

Rewrite the loop as a for loop (that handles the continuation correctly)
and wrap the condition and update statements using helper functions to make
it cleaner.