QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2026-46182

Back to search

CVE-2026-46182

Published: May 28, 2026

Modified: May 28, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr variable is allocated on the stack and only hdr.version and hdr.flags are initialized explicitly. Because the struct papr_hvpipe_hdr contains reserved padding bytes (reserved[3] and reserved2[40]), these could leak the uninitialized bytes to userspace after copy_to_user(). This patch fixes that by initializing the whole struct to 0.

VendorProductVersions

Linux

Linux

affected
cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 - < 0479b6e9f999cc1cbad7d9f09f574fc387e605d5
affected
cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 - < f88f8e4485b437e0a2f96a7ff1f88aa22d925659
affected
cebdb522fd3edd1fe05f7b4a74a27da7dd0f8d86 - < cefeed44296261173a806bef988b26bc565da4be

Linux

Linux

affected
6.18
unaffected
0 - < 6.18
unaffected
6.18.30 - <= 6.18.*
unaffected
7.0.7 - <= 7.0.*
unaffected
7.1-rc3 - <= *

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now