CVE-2026-46182

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
28/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace<br /> <br /> The hdr variable is allocated on the stack and only hdr.version and<br /> hdr.flags are initialized explicitly. Because the struct papr_hvpipe_hdr<br /> contains reserved padding bytes (reserved[3] and reserved2[40]), these<br /> could leak the uninitialized bytes to userspace after copy_to_user().<br /> <br /> This patch fixes that by initializing the whole struct to 0.

Impact