CVE-2026-23156

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where the efivar entry get() function does not properly propagate errors from the efivar entry get() function. This can lead to uninitialized heap memory being copied to user space through the efivarfs file read() path. The root cause is that efivar entry get() always returns success, even when efivar entry get() fails, effectively masking errors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.