Riskcovery

CVE-2026-80571

powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

State
Published
Severity
Not scored
Published
Aug 26, 2026
Updated
Aug 26, 2026
Reserved
Aug 26, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

In papr_phy_attest_create_handle(), the params->cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is either 0 or exceeds sizeof(params->cmd).

Also, params is freed on the success path but not error. Free it on errors after memory allocation. And free it on negative fd.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 86900ab620a42396a749b506d4a187820fc3fabe to before 828a8d1a9107aec6353d896882df8383accf7e80Affected
  • 86900ab620a42396a749b506d4a187820fc3fabe to before ed98ce338f9a65c90cb930b088f1eb36de7181afAffected
  • 86900ab620a42396a749b506d4a187820fc3fabe to before 5b17f3f34391372faf03e79d947e0c50ab6dd258Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.