CVE-2026-23156
Severity
7.8HIGH
EPSS
0.0%
top 96.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
efivarfs: fix error propagation in efivar_entry_get()
efivar_entry_get() always returns success even if the underlying
__efivar_entry_get() fails, masking errors.
This may result in uninitialized heap memory being copied to userspace
in the efivarfs_file_read() path.
Fix it by returning the error from __efivar_entry_get().
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
▶CVEListV5linux/linux2d82e6227ea189c0589e7383a36616ac2a2d248c — 3960f1754664661a970dc9ebbab44ff93a0b4c42+5
Patches
🔴Vulnerability Details
4VulDB▶
Linux Kernel up to 6.1.161/6.6.122/6.12.68/6.18.8 efivarfs efivar_entry_get uninitialized pointer (Nessus ID 299150 / WID-SEC-2026-0421)↗2026-04-13
OSV▶
CVE-2026-23156: In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always re↗2026-02-14
GHSA▶
GHSA-r6pf-fx8p-436v: In the Linux kernel, the following vulnerability has been resolved:
efivarfs: fix error propagation in efivar_entry_get()
efivar_entry_get() always↗2026-02-14