Out-of-bounds read in Linux kernel - CVE-2026-81014

Vulnerability details

The vulnerability allows a local user to perform an out-of-bounds read.

The vulnerability exists due to an out-of-bounds read in the sk_store() and kek_store() functions of the hp-bioscfg driver when handling sysfs writes ending with a trailing newline. A local user can submit a sysfs write with a trailing newline to perform an out-of-bounds read.

Affected software

How to mitigate CVE-2026-81014

External References

• https://git.kernel.org/stable/c/4c6374dcb270d12907b880cf82a5a5ef21785fc3
• https://git.kernel.org/stable/c/67b60703d7d8af1ca0e49f72e1bdb1ccecd41b5b
• https://git.kernel.org/stable/c/7cd8fe01aba303a2382db0966eb6c8ab41d5f3c2
• https://git.kernel.org/stable/c/a7508c7959ff8d037327d377ed21a9c0eabe4674

Related Security Bulletins

• Out-of-bounds read in Linux kernel hp hp-bioscfg driver