CVE-2026-23156

Katalog CVE

CVSS 7.8 · High EPSS 0,14%

Kerentanan pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success even if the underlying __efivar_entry_get() fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the efivarfs_file_read() path. Fix it by returning the error from __efivar_entry_get().

Rincian

Terbit di NVD

14 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 2,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3960f1754664661a970dc9ebbab44ff93a0b4c42 patch
• https://git.kernel.org/stable/c/4b22ec1685ce1fc0d862dcda3225d852fb107995 patch
• https://git.kernel.org/stable/c/510a16f1c5c1690b33504052bc13fbc2772c23f8 patch
• https://git.kernel.org/stable/c/89b8ca709eeeabcc11ebba64806677873a2787a8 patch
• https://git.kernel.org/stable/c/e4e15a0a4403c96d9898d8398f0640421df9cb16 patch