CVE-2026-23156: efivarfs: fix error propagation in efivar_entry_get()
In the Linux kernel, the following vulnerability has been resolved:
efivarfs: fix error propagation in efivarentryget()
efivarentryget() always returns success even if the underlying efivarentryget() fails, masking errors.
This may result in uninitialized heap memory being copied to userspace in the efivarfsfileread() path.
Fix it by returning the error from efivarentryget().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23156?
The severity of CVE-2026-23156 is classified as important due to potential error masking in the Linux kernel.
How do I fix CVE-2026-23156?
To fix CVE-2026-23156, ensure your Linux kernel is updated to the latest version that addresses this vulnerability.
What are the potential impacts of CVE-2026-23156?
The potential impacts of CVE-2026-23156 include the risk of undetected errors that could affect system stability and security.
Who is affected by CVE-2026-23156?
CVE-2026-23156 affects users and systems running vulnerable versions of the Linux kernel that involve efivarfs functionality.
Is there a workaround for CVE-2026-23156?
There are no specific workarounds recommended for CVE-2026-23156; the best course of action is to upgrade the kernel software.