Heap-based buffer overflow in Linux kernel - CVE-2026-97427

Vulnerability details

The vulnerability allows a local user to cause a heap-based buffer overflow.

The vulnerability exists due to a heap-based buffer overflow in pp_dpm_set_pp_table() when processing sysfs store writes larger than soft_pp_table_size. A local user can write oversized data through the sysfs store interface to cause a heap-based buffer overflow.

Affected software

How to mitigate CVE-2026-97427

External References

• https://git.kernel.org/stable/c/3334985f8b4c7c637a829744c81518ad9a671bcb
• https://git.kernel.org/stable/c/43d2ab8408f9f468b232350c74160ae21e763020
• https://git.kernel.org/stable/c/f193e71fa9fab2e68ef85201b106e8f580d3a25b

Related Security Bulletins

• Heap-based buffer overflow in Linux kernel pm powerplay driver