CVE-2026-46182
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
28/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace<br />
<br />
The hdr variable is allocated on the stack and only hdr.version and<br />
hdr.flags are initialized explicitly. Because the struct papr_hvpipe_hdr<br />
contains reserved padding bytes (reserved[3] and reserved2[40]), these<br />
could leak the uninitialized bytes to userspace after copy_to_user().<br />
<br />
This patch fixes that by initializing the whole struct to 0.



