CVE-2026-46253

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A heap buffer overflow (out-of-bounds write) exists in the persistent ram save old() function within the pstore/ram component. The issue occurs when the function is called multiple times for the same persistent ram zone. The function only allocates the old log buffer when it is NULL, but it unconditionally updates the old log size variable to the current buffer size before performing a memcpy fromio() operation. If the buffer size increases between kernel boot cycles, the memcpy fromio() call overflows the heap. This can subsequently lead to an out-of-bounds read when ramoops pstore read() accesses the buffer using the incorrect, larger old log size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.