CVE-2026-46064 ibmasm: fix heap over-read in ibmasm_send_i2o_message()

🗓️ 27 May 2026 12:57:30Reported by LinuxType

Fixes heap over-read in ibmasm_send_i2o_message by validating command_size and rejecting inconsistent headers.

Reporter	Title	Published	Views	Family All 41
ATTACKERKB	CVE-2026-46064	27 May 202612:57	–	attackerkb
CNNVD	Linux kernel 安全漏洞	27 May 202600:00	–	cnnvd
CVE	CVE-2026-46064	27 May 202612:57	–	cve
Debian CVE	CVE-2026-46064	27 May 202612:57	–	debiancve
EUVD	EUVD-2026-32446	27 May 202612:57	–	euvd
Microsoft CVE	ibmasm: fix heap over-read in ibmasm_send_i2o_message()	28 May 202608:01	–	mscve
NVD	CVE-2026-46064	27 May 202614:17	–	nvd
OPENSUSE Linux	kernel-devel-7.0.11-1.1 on GA media (moderate)	8 Jun 202600:00	–	opensuse
OSV	BELL-CVE-2026-46064	28 May 202606:10	–	osv
OSV	DEBIAN-CVE-2026-46064	27 May 202614:17	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/misc/ibmasm/lowlevel.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "ca1c857e2bb74a9fc0606128334f85316d57067b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "b870f652877bfbe321bd0f4096fc37a93296f7b6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "ce57fa439bd1b5d664f334a0c3e3f0e42abb0153",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "fd19eb1c75047a4ed4e855f56cafd704dc3914e0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "fe31722b0194ff76bf8b461e8bf97a2081147787",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "c1c2417c60dbdca5ebb00462f21ee71c2d7f7083",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "9e8f6c9d4ecddda2f28baa1678340286cff3969c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "9aad71144fa3682cca3837a06c8623016790e7ec",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/misc/ibmasm/lowlevel.c"
    ],
    "versions": [
      {
        "version": "2.6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.140",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.86",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.27",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.4",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/ce57fa439bd1b5d664f334a0c3e3f0e42abb0153
git	www.git.kernel.org/stable/c/9aad71144fa3682cca3837a06c8623016790e7ec
git	www.git.kernel.org/stable/c/fe31722b0194ff76bf8b461e8bf97a2081147787
git	www.git.kernel.org/stable/c/c1c2417c60dbdca5ebb00462f21ee71c2d7f7083
git	www.git.kernel.org/stable/c/ca1c857e2bb74a9fc0606128334f85316d57067b
git	www.git.kernel.org/stable/c/b870f652877bfbe321bd0f4096fc37a93296f7b6
git	www.git.kernel.org/stable/c/fd19eb1c75047a4ed4e855f56cafd704dc3914e0
git	www.git.kernel.org/stable/c/9e8f6c9d4ecddda2f28baa1678340286cff3969c

14 Jun 2026 17:51Current

EPSS0.00176