https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 05:39:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-80571 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak</p> <p>In papr_phy_attest_create_handle(), the params-&gt;cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is either 0 or exceeds sizeof(params-&gt;cmd).</p> <p>Also, params is freed on the success path but not error. Free it on errors after memory allocation. And free it on negative fd.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak</p> <p>In papr_phy_attest_create_handle(), the params-&gt;cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is either 0 or exceeds sizeof(params-&gt;cmd).</p> <p>Also, params is freed on the success path but not error. Free it on errors after memory allocation. And free it on negative fd.</p> https://vulnerability.circl.lu/vuln/cve-2026-80571