CVE-2026-80571

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak In papr_phy_attest_create_handle(), the params->cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is either 0 or exceeds sizeof(params->cmd). Also, params is freed on the success path but not error. Free it on errors after memory allocation. And free it on negative fd.

Package Linux Kernel
Published 2026-08-26
Last modified 2026-08-26
Patch available
Yes

Affected versions

Linux kernel versions 6.16 and later are affected. Fixed in 6.18.46, 7.1.10, 7.2 and their respective stable series.

Affected from
≥ 6.16
Fixed in
✓ 6.18.46 6.18.x ✓ 7.1.10 7.1.x ✓ 7.2

References

3 total

Frequently asked questions

  • What is CVE-2026-80571?

    CVE-2026-80571 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.16 onward and has been patched in 6.18.46, 7.1.10 and 7.2. CVE-2026-80571 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-80571?

    Yes. CVE-2026-80571 has been patched. Fixed versions include 6.18.46, 7.1.10 and 7.2. If you are running Linux kernel 6.16 or later up to the fix versions, apply the relevant patch for your kernel branch.

  • Is CVE-2026-80571 actively exploited?

    No. CVE-2026-80571 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

Back to
All CVEs
View on
NVD / NIST