{"id":"CVE-2026-74399","summary":"evm: terminate and bound the evm_xattrs read buffer","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nevm: terminate and bound the evm_xattrs read buffer\n\nevm_read_xattrs() allocates size + 1 bytes, fills them from the list of\nenabled xattrs, and then passes strlen(temp) to\nsimple_read_from_buffer(). When no configured xattrs are enabled, the\nfill loop stores nothing and temp[0] remains uninitialized, so strlen()\nreads beyond initialized memory.\n\nExplicitly terminate the buffer after allocation, use snprintf() for\neach formatted line, and pass the accumulated length, without risk of\ntruncation, to simple_read_from_buffer().","modified":"2026-08-18T03:31:12.927881426Z","published":"2026-08-15T05:59:10.791Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74399.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0b9f8282b40af4a99d6243d2cb939d14ff36b049"},{"type":"WEB","url":"https://git.kernel.org/stable/c/11143a19f5b8dc8f414deab87571134f9f447313"},{"type":"WEB","url":"https://git.kernel.org/stable/c/12ad52dc45a0c8c9d25e85b4a84201de4c5420ed"},{"type":"WEB","url":"https://git.kernel.org/stable/c/38b7d63b23aa9d2ddde7688040e9426d32be4065"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8df81954d22a653a8b01d46692cd56f71137269b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a0f64cf8bfcb39e533d9e27aeb763a8d81b7f39d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a36cbfb85f26e6c6fb6529b1a364331b94dc88f3"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74399.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74399"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"fa516b66a1bfce1d72f1620c54bdfebc493000d1"},{"fixed":"8df81954d22a653a8b01d46692cd56f71137269b"},{"fixed":"0b9f8282b40af4a99d6243d2cb939d14ff36b049"},{"fixed":"a36cbfb85f26e6c6fb6529b1a364331b94dc88f3"},{"fixed":"12ad52dc45a0c8c9d25e85b4a84201de4c5420ed"},{"fixed":"a0f64cf8bfcb39e533d9e27aeb763a8d81b7f39d"},{"fixed":"38b7d63b23aa9d2ddde7688040e9426d32be4065"},{"fixed":"11143a19f5b8dc8f414deab87571134f9f447313"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74399.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.18.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74399.json"}}],"schema_version":"1.9.0"}