CVE-2026-80571

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the papr phy attest create handle() function where the params->cmd.length variable is not validated before use, potentially leading to a buffer overflow. Additionally, a memory leak occurs because the params variable is not freed during error paths following memory allocation or when a negative file descriptor is encountered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.