Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success even if the underlying __efivar_entry_get() fails, masking errors. This may result in uninitialized heap memory being copied to userspace in the efivarfs_file_read() path. Fix it by returning the error from __efivar_entry_get().
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-23156 In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_get() efivar_entry_get() always returns success … https://www.cve.org/CVERecord?id=CVE-2026-23156
Post summary
The CVE-2026-23156 vulnerability in the Linux kernel's efivarfs module has been fixed, correcting error propagation in efivar_entry_get() which previously caused it to always return success.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |