CVE-2026-46182

A flaw was found in the Linux kernel, specifically within the pseries/papr-hvpipe module. This vulnerability could allow a local user to gain access to uninitialized kernel stack memory. The issue arises because certain padding bytes in a data structure are not cleared before being sent to userspace, potentially leading to the disclosure of sensitive information.

This vulnerability is classified as Moderate severity for Red Hat because successful exploitation requires local user access on IBM Power (pseries) systems and only leads to information disclosure without granting elevated privileges. The flaw is restricted to deployments running on Power Architecture Platform Reference (PAPR) environments where the hypervisor pipe interface is utilized. Systems on other CPU architectures or virtual environments not using this platform-specific driver remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.