CVE-2026-80571
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
26/08/2026
Última modificación:
26/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak<br />
<br />
In papr_phy_attest_create_handle(), the params->cmd.length is not<br />
validated before use, which can result in a buffer overlow. Check it and<br />
return -EINVAL if it is either 0 or exceeds sizeof(params->cmd).<br />
<br />
Also, params is freed on the success path but not error. Free it on<br />
errors after memory allocation. And free it on negative fd.