CVE-2026-46022

A flaw was found in the Linux kernel's ibmasm module. A compromised service processor can exploit this by manipulating specific hardware registers, causing the system to read data from an unintended memory location. This out-of-bounds read can lead to a system crash, resulting in a Denial of Service (DoS).

Red Hat rates this flaw as having a Moderate severity impact because successful exploitation requires an adversary to possess control over the physical or virtual service processor, restricting the threat to specialized legacy environments. While corrupted hardware register values can induce a machine check exception and crash the host operating system, the flaw does not facilitate arbitrary code execution or privilege escalation. Furthermore, the ibmasm driver is specific to legacy IBM server hardware and the vulnerable code is not present in modern Red Hat Enterprise Linux releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.