Riskcovery

CVE-2026-46182

pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace

State
Published
Severity
Not scored
Published
May 28, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace

The hdr variable is allocated on the stack and only hdr.version and hdr.flags are initialized explicitly. Because the struct papr_hvpipe_hdr contains reserved padding bytes (reserved[3] and reserved2[40]), these could leak the uninitialized bytes to userspace after copy_to_user().

This patch fixes that by initializing the whole struct to 0.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 to before 0479b6e9f999cc1cbad7d9f09f574fc387e605d5Affected
  • cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 to before f88f8e4485b437e0a2f96a7ff1f88aa22d925659Affected
  • cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 to before cefeed44296261173a806bef988b26bc565da4beAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.