PT-2026-44305 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46182

NVD

In the Linux kernel, the following vulnerability has been resolved:

pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace

The hdr variable is allocated on the stack and only hdr.version and hdr.flags are initialized explicitly. Because the struct papr hvpipe hdr contains reserved padding bytes (reserved[3] and reserved2[40]), these could leak the uninitialized bytes to userspace after copy to user().

This patch fixes that by initializing the whole struct to 0.

Related Identifiers

CVE-2026-46182

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-46182 · Security Note
• https://git.kernel.org/stable/c/cefeed44296261173a806bef988b26bc565da4be · Note
• https://git.kernel.org/stable/c/0479b6e9f999cc1cbad7d9f09f574fc387e605d5 · Note
• https://git.kernel.org/stable/c/f88f8e4485b437e0a2f96a7ff1f88aa22d925659 · Note