Home

Description

In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr variable is allocated on the stack and only hdr.version and hdr.flags are initialized explicitly. Because the struct papr_hvpipe_hdr contains reserved padding bytes (reserved[3] and reserved2[40]), these could leak the uninitialized bytes to userspace after copy_to_user(). This patch fixes that by initializing the whole struct to 0.

PUBLISHED Reserved 2026-05-13 | Published 2026-05-28 | Updated 2026-05-28 | Assigner Linux

Product status

Default status
unaffected

cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 (git) before 0479b6e9f999cc1cbad7d9f09f574fc387e605d5
affected

cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 (git) before f88f8e4485b437e0a2f96a7ff1f88aa22d925659
affected

cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 (git) before cefeed44296261173a806bef988b26bc565da4be
affected

Default status
affected

6.18
affected

Any version before 6.18
unaffected

6.18.30 (semver)
unaffected

7.0.7 (semver)
unaffected

7.1-rc3 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/0479b6e9f999cc1cbad7d9f09f574fc387e605d5

git.kernel.org/...c/f88f8e4485b437e0a2f96a7ff1f88aa22d925659

git.kernel.org/...c/cefeed44296261173a806bef988b26bc565da4be

cve.org (CVE-2026-46182)

nvd.nist.gov (CVE-2026-46182)

Download JSON