CVE-2026-58731

In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Scoring

Severity
MEDIUM
CVSS base score
6.2
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS probability
0.07%
Published
2026-09-15
Last modified
2026-09-16

Affected products

Markdown version · Browse all CVEs