CVE-2026-46182
- Source
- https://cve.org/CVERecord?id=CVE-2026-46182
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46182.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-46182
- Downstream
- Related
- Published
- 2026-05-28T09:36:35.528Z
- Modified
- 2026-07-08T08:13:37.635033002Z
- Summary
- pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace
The hdr variable is allocated on the stack and only hdr.version and hdr.flags are initialized explicitly. Because the struct paprhvpipehdr contains reserved padding bytes (reserved[3] and reserved2[40]), these could leak the uninitialized bytes to userspace after copytouser().
This patch fixes that by initializing the whole struct to 0.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46182.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/0479b6e9f999cc1cbad7d9f09f574fc387e605d5
- https://git.kernel.org/stable/c/cefeed44296261173a806bef988b26bc565da4be
- https://git.kernel.org/stable/c/f88f8e4485b437e0a2f96a7ff1f88aa22d925659
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46182.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-46182
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git