CVE-2026-81014

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description A heap out-of-bounds read exists in the hp-bioscfg module. The functions sk store() and kek store() strip a trailing newline from a sysfs write to determine the length for buffer allocation via kmemdup(). However, the original count variable is passed as the copy size to the hp wmi perform query() function. This causes memcpy() to read one byte beyond the allocated buffer whenever the write ends in a newline.

Recommendations Update the Linux kernel to version 7.2.6-1.1 or later.