CVE-2026-80571 powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak In paprphyattestcreatehandle, the params-cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is...

PT-2026-82187

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the papr phy attest create handle function where the params-cmd.length variable is not validated before use, potentially leading to a buffer overflow. Additionally, a...

Linux Distros Unpatched Vulnerability : CVE-2026-80571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak In paprphyattestcreatehandle, the params-cmd.length is not validated before use, which can...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fixed access beyond the end of the drmem array The dlparmemoryremovebyindex function may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC index...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013223 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007549)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007549 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch trace lo...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42230)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42230 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction cra...

Azure Linux 3.0 Security Update: kernel (CVE-2024-36926)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36926 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics durin...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56765)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56765 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close callback ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000460)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000460 advisory. An issue was discovered in dlparparseccproperty in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of...

CVE-2023-54267

Technical details for CVE-2023-54267 are not publicly available in the provided documents. The initial entry mentions a Linux kernel fix in powerpc/pseries and lppaca_shared_proc() but does not specify affected products/versions or remediation specifics beyond generic description; monitor for upd...

CVE-2023-54267 powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Rework lppacasharedproc to avoid DEBUGPREEMPT lppacasharedproc takes a pointer to the lppaca which is typically accessed through getlppaca. With DEBUGPREEMPT enabled, this leads to checking if preemption is...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper access to lppacasharedproc in powerpc/pseries, which could lead to debugging preemption errors...

Linux Distros Unpatched Vulnerability : CVE-2023-54017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname...

SUSE CVE-2023-54017

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname called in deviceadd is leaked. As comment of deviceadd says, it shoul...

CVE-2023-54017

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname called in deviceadd is leaked. As comment of deviceadd says, it shoul...

CVE-2023-54017

Technical details about CVE-2023-54017 are not provided in the supplied documents; no vendor/product/version/root-cause or fix is present. Monitor for updates.

PT-2025-52974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the powerpc/pseries architecture within the ibmebus bus init function of the Linux kernel. If the device register function returns an error during the...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40974)

powerpc/pseries: stack corruption at runtime when plparhcall9 stores results past the end of the array. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990260)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990260 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Whitelist dtl slub object for copying to userspace Reading the dispatch trace lo...