{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23131", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.971Z", "datePublished": "2026-02-14T15:09:58.916Z", "dateUpdated": "2026-05-11T22:00:43.817Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:00:43.817Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names\n\nThe hp-bioscfg driver attempts to register kobjects with empty names when\nthe HP BIOS returns attributes with empty name strings. This causes\nmultiple kernel warnings:\n\n kobject: (00000000135fb5e6): attempted to be registered with empty name!\n WARNING: CPU: 14 PID: 3336 at lib/kobject.c:219 kobject_add_internal+0x2eb/0x310\n\nAdd validation in hp_init_bios_buffer_attribute() to check if the\nattribute name is empty after parsing it from the WMI buffer. If empty,\nlog a debug message and skip registration of that attribute, allowing the\nmodule to continue processing other valid attributes."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/platform/x86/hp/hp-bioscfg/bioscfg.c"], "versions": [{"version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "lessThan": "29917c80aa96a25cbcf5876fd774a1cfd72b01a9", "status": "affected", "versionType": "git"}, {"version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "lessThan": "6476be59b7162b891b7bddbd0c2924d87379ef6c", "status": "affected", "versionType": "git"}, {"version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "lessThan": "800b2767905d6b409b8bbe357121970f0b489a89", "status": "affected", "versionType": "git"}, {"version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "lessThan": "fdee1b09721605f532352628d0a24623e7062efb", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/platform/x86/hp/hp-bioscfg/bioscfg.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.122", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.68", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.8", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.6.122"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.12.68"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.18.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.19"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/29917c80aa96a25cbcf5876fd774a1cfd72b01a9"}, {"url": "https://git.kernel.org/stable/c/6476be59b7162b891b7bddbd0c2924d87379ef6c"}, {"url": "https://git.kernel.org/stable/c/800b2767905d6b409b8bbe357121970f0b489a89"}, {"url": "https://git.kernel.org/stable/c/fdee1b09721605f532352628d0a24623e7062efb"}], "title": "platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/platform/x86/hp/hp-bioscfg/bioscfg.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "29917c80aa96a25cbcf5876fd774a1cfd72b01a9", "status": "affected", "version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "versionType": "git"}, {"lessThan": "6476be59b7162b891b7bddbd0c2924d87379ef6c", "status": "affected", "version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "versionType": "git"}, {"lessThan": "800b2767905d6b409b8bbe357121970f0b489a89", "status": "affected", "version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "versionType": "git"}, {"lessThan": "fdee1b09721605f532352628d0a24623e7062efb", "status": "affected", "version": "a34fc329b1895fc8a6eb12099adc47009421ba6a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/platform/x86/hp/hp-bioscfg/bioscfg.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"lessThan": "6.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.122", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.68", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5BC7DC6F-F752-49B5-82B2-A8F4BF9C3EAC", "versionEndExcluding": "6.6.122", "versionStartIncluding": "6.6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "52F38E19-0FDD-4992-9D6D-D4169D689598", "versionEndExcluding": "6.12.68", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E65C6E79-7EBE-4C77-93F0-818CF5B38F4E", "versionEndExcluding": "6.18.8", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*", "matchCriteriaId": "17B67AA7-40D6-4AFA-8459-F200F3D7CFD1", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*", "matchCriteriaId": "C47E4CC9-C826-4FA9-B014-7FE3D9B318B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*", "matchCriteriaId": "F71D92C0-C023-48BD-B3B6-70B638EEE298", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*", "matchCriteriaId": "13580667-0A98-40CC-B29F-D12790B91BDB", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*", "matchCriteriaId": "CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*", "matchCriteriaId": "3EF854A1-ABB1-4E93-BE9A-44569EC76C0D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names\n\nThe hp-bioscfg driver attempts to register kobjects with empty names when\nthe HP BIOS returns attributes with empty name strings. This causes\nmultiple kernel warnings:\n\n kobject: (00000000135fb5e6): attempted to be registered with empty name!\n WARNING: CPU: 14 PID: 3336 at lib/kobject.c:219 kobject_add_internal+0x2eb/0x310\n\nAdd validation in hp_init_bios_buffer_attribute() to check if the\nattribute name is empty after parsing it from the WMI buffer. If empty,\nlog a debug message and skip registration of that attribute, allowing the\nmodule to continue processing other valid attributes."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nplatform/x86: hp-bioscfg: Correcci\u00f3n de advertencias de kobject para nombres de atributos vac\u00edos\n\nEl controlador hp-bioscfg intenta registrar kobjects con nombres vac\u00edos cuando la BIOS de HP devuelve atributos con cadenas de nombre vac\u00edas. Esto causa m\u00faltiples advertencias del kernel:\n\nkobject: (00000000135fb5e6): \u00a1se intent\u00f3 registrar con nombre vac\u00edo!\nWARNING: CPU: 14 PID: 3336 en lib/kobject.c:219 kobject_add_internal+0x2eb/0x310\n\nA\u00f1adir validaci\u00f3n en hp_init_bios_buffer_attribute() para verificar si el nombre del atributo est\u00e1 vac\u00edo despu\u00e9s de analizarlo desde el b\u00fafer WMI. Si est\u00e1 vac\u00edo, registrar un mensaje de depuraci\u00f3n y omitir el registro de ese atributo, permitiendo que el m\u00f3dulo contin\u00fae procesando otros atributos v\u00e1lidos."}], "id": "CVE-2026-23131", "lastModified": "2026-06-17T10:20:57.400", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2026-02-14T15:16:08.387", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/29917c80aa96a25cbcf5876fd774a1cfd72b01a9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6476be59b7162b891b7bddbd0c2924d87379ef6c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/800b2767905d6b409b8bbe357121970f0b489a89"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/fdee1b09721605f532352628d0a24623e7062efb"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names", "id": "2439855", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439855"}, "csaw": false, "details": ["No description is available for this CVE."], "name": "CVE-2026-23131", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-02-14T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23131\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23131\nhttps://lore.kernel.org/linux-cve-announce/2026021411-CVE-2026-23131-6201@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a34fc329b1895fc8a6eb12099adc47009421ba6a,29917c80aa96a25cbcf5876fd774a1cfd72b01a9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a34fc329b1895fc8a6eb12099adc47009421ba6a,6476be59b7162b891b7bddbd0c2924d87379ef6c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a34fc329b1895fc8a6eb12099adc47009421ba6a,800b2767905d6b409b8bbe357121970f0b489a89)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a34fc329b1895fc8a6eb12099adc47009421ba6a,fdee1b09721605f532352628d0a24623e7062efb)"}}], "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.122,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.68,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.8,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19,*]"}}], "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-18T12:24:21.542196+00:00", "value": {"mitigation_remediation": ["Upgrade to a kernel version that includes the hp_bioscfg kobject name validation patch (e.g., kernel 6.19.0 or newer).", "If an upgrade is not possible, rebuild the kernel or the hp_bioscfg module with the updated changes to skip registration of empty attribute names.", "Keep HP BIOS firmware updated to eliminate empty attribute names.", "If the device does not require BIOS configuration, consider disabling the hp_bioscfg driver to avoid the issue."], "summary": {"action": "Apply patch", "impact": "Kernel warnings caused by empty kobject names potentially affecting stability"}, "threat_synthesis": {"affected_systems": "All Linux kernels that include the hp_bioscfg driver from version 6.19 release candidate 1 through release candidate 6 are affected. The patch is part of the 6.19 kernel series, so updating to any kernel that incorporates the fix after the release candidate stages mitigates the issue.", "description_and_impact": "The hp-bioscfg driver registers kernel objects using names parsed from HP BIOS attributes. When the BIOS returns an empty string, the driver attempts to create a kobject with an empty name, which triggers kernel warnings and log noise. This is a validation weakness; it does not directly expose data or allow code execution, but it can disturb kernel stability and increase log volume, potentially obscuring real issues.", "risk_and_exploitability": "With a CVSS score of 5.5 the vulnerability is moderate. The EPSS score of less than 1% indicates a very low exploitation probability, and the issue is not listed in the CISA KEV catalog. No publicly known exploits exist. The likely vector would involve a system with an HP BIOS that returns empty attribute names, which an attacker might provoke only with local or firmware-level privileges; thus realistic risk is mainly increased log noise and potential kernel performance impact rather than traditional security compromise."}}}}, "created": "2026-02-16T12:01:35.709898+00:00", "updated": "2026-04-18T12:30:45.472729+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-20"]}