CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks
ibmasm: fix OOB reads in commandfilewrite due to missing size checks
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Upgrade
Upgrade
linux kernelto a version that resolves this vulnerability.Patch ibmasm: fix OOB reads in command_file_write due to missing size checks - Configuration
Modify command_file_write() to validate the incoming write size against the total size declared by the dot_command_header fields, and reject commands where the buffer is smaller than (sizeof(header) + command_size + data_size) to prevent OOB reads in get_dot_command_timeout().
Linux kernel (dot command protocol, command_file_write()) Reject writes where provided buffer size < declared total size (sizeof(header) + command_size + data_size) = buffer_too_small_rejected
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45994?
The severity of CVE-2026-45994 is high, with a score of 7.1.
What type of vulnerability is identified in CVE-2026-45994?
CVE-2026-45994 identifies an out-of-bounds (OOB) read vulnerability in the command_file_write handler.
How do I fix CVE-2026-45994?
To fix CVE-2026-45994, ensure that you update your Linux kernel to the patched version that includes the fix for the OOB reads.
What software is affected by CVE-2026-45994?
CVE-2026-45994 affects the Linux kernel, specifically the ibmasm component of the kernel.
What are the potential impacts of exploiting CVE-2026-45994?
Exploiting CVE-2026-45994 could lead to denial of service due to application crashes, as the out-of-bounds read may compromise system stability.