CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of the `papr_phy_attest_create_handle()` function, where insufficient validation of the `params->cmd.length` can lead to a buffer overflow. This flaw may result in memory corruption and potential denial of service, making it critical for developers and system administrators managing Linux systems to prioritize patching. Additionally, proper memory management is compromised due to failure to free allocated memory on error paths, further exacerbating the risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak In papr_phy_attest_create_handle(), the params->cmd.length is not validated before use, which can result in a buffer overlow. Check it and return -EINVAL if it is either 0 or exceeds sizeof(params->cmd). Also, params is freed on the success path but not error. Free it on errors after memory allocation. And free it on negative fd.