CVE-2026-80571

Not scored yetLast modified Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

In papr_phy_attest_create_handle(), the params->cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is either 0 or exceeds sizeof(params->cmd).

Also, params is freed on the success path but not error. Free it on errors after memory allocation. And free it on negative fd.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 86900ab620a42396a749b506d4a187820fc3fabe, < 828a8d1a9107aec6353d896882df8383accf7e80; >= 86900ab620a42396a749b506d4a187820fc3fabe, < ed98ce338f9a65c90cb930b088f1eb36de7181af; >= 86900ab620a42396a749b506d4a187820fc3fabe, < 5b17f3f34391372faf03e79d947e0c50ab6dd258
LinuxLinux6.16

References

Timeline

Published
Aug 26, 2026
Last modified
Aug 26, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-805727.8In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before freeing private data byCVE-2026-80573In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforce_process_packet() CVE-2026-805748.4In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltech_process_rel_pacCVE-2026-805757.8In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from user space cs40l50_adCVE-2026-805768.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject oversized IBs with per-ring packet limits On GFX riCVE-2026-80577In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthor_fw_load_sectionCVE-2026-805787.3In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io_read() In fb_io_reCVE-2026-805797.8In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videomode fb_set_var() caCVE-2026-80584.9IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stoCVE-2026-805807.8In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer mode_string() uses CVE-2026-80581In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeoCVE-2026-805827.8In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mappings In the ->huge_
CVE-2026-80571: Unscored | Vulnix