ibmvfc driver

  1. CVE-2026-31464: IBM Power ibmvfc Kernel Leak via Unchecked num_written Count

    A newly published Linux kernel CVE is drawing attention for a familiar but dangerous reason: a trusted control path accepted attacker-controlled data without enforcing a hard ceiling. In CVE-2026-31464, the ibmvfc driver can take a num_written value from a VIO server’s discover-targets MAD...
  2. CVE-2026-31464: Linux ibmvfc Out-of-Bounds Read Can Leak Kernel Memory

    The Linux kernel has a new security issue on the radar, and this one is a reminder that even highly specialized storage and virtualization paths can leak sensitive state when a single bounds check is missed. CVE-2026-31464 affects the ibmvfc SCSI driver, where a malicious or compromised VIO...