SB20260912368 - Out-of-bounds read in Linux kernel hp hp-bioscfg driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds read (CVE-ID: CVE-2026-81011)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in the hp-bioscfg package parsers when parsing ACPI BIOS configuration attribute packages. A local user can cause the kernel to parse a short package whose name length exceeds its element count to disclose sensitive information.

The condition requires acceptance of packages that are shorter than the element count expected for their attribute type.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/400cbc3ccc88a5ad37cd85056224635ce9eba018
• https://git.kernel.org/stable/c/436017808c7cbcdb5e49b2142090d4391e3de9a6
• https://git.kernel.org/stable/c/a38127df99ae8b1851560b35b837c9952416143a
• https://git.kernel.org/stable/c/e0ddfd77c0c320b7d12b6c9169303b140b798775