Out-of-Bounds Buffer Access in Linux Kernel Affects Device Drivers

CVE-2026-46197

What is CVE-2026-46197?

A vulnerability exists in the Linux kernel that permits out-of-bounds buffer access due to inadequate validation of the 'nattr' field against buffer size during SVM ioctl operations. This flaw could potentially be exploited through user-controlled attribute count, leading to unexpected behavior or system crashes. Proper validation mechanisms have been established to avert this security issue, ensuring enhanced integrity and stability of device drivers.

References