Search: CVE-2026-23156

A vulnerability in the Linux kernel efivarfs subsystem caused the efivar_entry_get() function to always return success even when the underlying __efivar_entry_get() failed. This error masking could lead to uninitialized heap memory being copied to userspace during efivarfs_file_read() operations. The issue has been fixed by correcting the error propagation to return the actual error from __efivar_entry_get().