-

CVE-2026-80571

powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

In the Linux kernel, the following vulnerability has been resolved:

powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

In papr_phy_attest_create_handle(), the params->cmd.length is not
validated before use, which can result in a buffer overlow.  Check it and
return -EINVAL if it is either 0 or exceeds sizeof(params->cmd).

Also, params is freed on the success path but not error. Free it on
errors after memory allocation.  And free it on negative fd.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 86900ab620a42396a749b506d4a187820fc3fabe
Version < 828a8d1a9107aec6353d896882df8383accf7e80
Status affected
Version 86900ab620a42396a749b506d4a187820fc3fabe
Version < ed98ce338f9a65c90cb930b088f1eb36de7181af
Status affected
Version 86900ab620a42396a749b506d4a187820fc3fabe
Version < 5b17f3f34391372faf03e79d947e0c50ab6dd258
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.46
Status unaffected
Version <= 7.1.*
Version 7.1.10
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.049
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/828a8d1a9107aec6353d896882df8383accf7e80
https://git.kernel.org/stable/c/ed98ce338f9a65c90cb930b088f1eb36de7181af
https://git.kernel.org/stable/c/5b17f3f34391372faf03e79d947e0c50ab6dd258