---
id: CVE-2025-71118
title: 'ACPICA: Avoid walking the Namespace if start_node is NULL'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ACPICA: Avoid walking the Namespace if start_node is NULL

  Although commit 0c9992315e73 ("ACPICA: Avoid walking the ACPI Namespace
  if it is not there") fixed the situat…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    b84edef48cc8afb41150949a87dcfa81bc95b53e
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    ecb296286c8787895625bd4c53e9478db4ae139c
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    7f9b951ed11842373851dd3c91860778356d62d3
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    1bc34293dfbd266c29875206849b4f8e8177e6df
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    0d8bb08126920fd4b12dbf32d9250757c9064b36
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    f91dad0a3b381244183ffbea4cec5a7a69d6f41e
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    9d6c58dae8f6590c746ac5d0012ffe14a77539f0
  - Linux 2.6.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-06-10T20:41:25.331984Z'
published: '2026-01-14'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T18:15:14.450Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71118'
references:
  - url: 'https://git.kernel.org/stable/c/b84edef48cc8afb41150949a87dcfa81bc95b53e'
  - url: 'https://git.kernel.org/stable/c/ecb296286c8787895625bd4c53e9478db4ae139c'
  - url: 'https://git.kernel.org/stable/c/7f9b951ed11842373851dd3c91860778356d62d3'
  - url: 'https://git.kernel.org/stable/c/1bc34293dfbd266c29875206849b4f8e8177e6df'
  - url: 'https://git.kernel.org/stable/c/0d8bb08126920fd4b12dbf32d9250757c9064b36'
  - url: 'https://git.kernel.org/stable/c/f91dad0a3b381244183ffbea4cec5a7a69d6f41e'
  - url: 'https://git.kernel.org/stable/c/9d6c58dae8f6590c746ac5d0012ffe14a77539f0'
tags:
  - cve.org
epss: 0.00147
epssPercentile: 0.0356
ingestedAt: '2026-10-19T18:35:50.133Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Avoid walking the Namespace if start_node is NULL

Although commit 0c9992315e73 ("ACPICA: Avoid walking the ACPI Namespace
if it is not there") fixed the situation when both start_node and
acpi_gbl_root_node are NULL, the Linux kernel mainline now still crashed
on Honor Magicbook 14 Pro [1].

That happens due to the access to the member of parent_node in
acpi_ns_get_next_node().  The NULL pointer dereference will always
happen, no matter whether or not the start_node is equal to
ACPI_ROOT_OBJECT, so move the check of start_node being NULL
out of the if block.

Unfortunately, all the attempts to contact Honor have failed, they
refused to provide any technical support for Linux.

The bad DSDT table's dump could be found on GitHub [2].

DMI: HONOR FMB-P/FMB-P-PCB, BIOS 1.13 05/08/2025

[ rjw: Subject adjustment, changelog edits ]

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b84edef48cc8afb41150949a87dcfa81bc95b53e`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ecb296286c8787895625bd4c53e9478db4ae139c`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7f9b951ed11842373851dd3c91860778356d62d3`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 1bc34293dfbd266c29875206849b4f8e8177e6df`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0d8bb08126920fd4b12dbf32d9250757c9064b36`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f91dad0a3b381244183ffbea4cec5a7a69d6f41e`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9d6c58dae8f6590c746ac5d0012ffe14a77539f0`
- `Linux 2.6.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
