Buffer Overflow Vulnerability in Linux Kernel Affecting PowerPC/Pseries

CVE-2026-80571

What is CVE-2026-80571?

A vulnerability exists in the Linux kernel specifically within the PowerPC/Pseries architecture, related to the papr_phy_attest_create_handle function. The 'cmd.length' parameter is inadequately validated, leading to potential buffer overflow scenarios. Additionally, there are issues related to memory management as memory allocated on successful execution is not properly freed when errors occur, which can lead to memory leaks. The vulnerability necessitates validation checks to ensure the command length is a valid value that does not exceed expected limits, alongside proper cleanup on error conditions.

References