CVE-2026-45994

A flaw was found in the Linux kernel's ibmasm module. This vulnerability, an out-of-bounds read in the command_file_write function, allows an attacker to cause the system to read beyond the intended memory boundaries. By manipulating the allocation size and header fields, an attacker can trigger this flaw, leading to the disclosure of sensitive kernel heap memory to the service processor. This could result in unauthorized access to confidential system information.

This vulnerability is rated as Moderate severity because exploitation requires local access with write privileges to the ibmasm virtual file system, confining the attack surface to authenticated local users on host systems. Furthermore, the issue requires systems equipped with legacy IBM Advanced System Management service processor hardware, which is neither present nor enabled in modern Red Hat Enterprise Linux releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.