Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-80571

powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak In papr_phy_attest_create_handle(), the params->cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is either 0 or exceeds sizeof(params->cmd). Also, params is freed on the success path but not error. Free it on errors after memory allocation. And free it on negative fd.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 86900ab620a42396a749b506d4a187820fc3fabe to < 828a8d1a9107aec6353d896882df8383accf7e80affected
  • 86900ab620a42396a749b506d4a187820fc3fabe to < ed98ce338f9a65c90cb930b088f1eb36de7181afaffected
  • 86900ab620a42396a749b506d4a187820fc3fabe to < 5b17f3f34391372faf03e79d947e0c50ab6dd258affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.18.46 to ≤ 6.18.*unaffected
  • 7.1.10 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References