Medium severity5.5NVD Advisory· Published May 28, 2026· Updated Jun 11, 2026
CVE-2026-46182
CVE-2026-46182
Description
In the Linux kernel, the following vulnerability has been resolved:
pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace
The hdr variable is allocated on the stack and only hdr.version and hdr.flags are initialized explicitly. Because the struct papr_hvpipe_hdr contains reserved padding bytes (reserved[3] and reserved2[40]), these could leak the uninitialized bytes to userspace after copy_to_user().
This patch fixes that by initializing the whole struct to 0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- osv-coords2 versions
>= 6.18.0, < 6.18.30+ 1 more
- (no CPE)range: >= 6.18.0, < 6.18.30
- (no CPE)range: < 7.0.11-1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.