CVE-2026-23131

Source
https://cve.org/CVERecord?id=CVE-2026-23131
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23131.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-23131
Downstream
Related
Published
2026-02-14T15:09:58.916Z
Modified
2026-05-07T04:16:49.843417Z
Summary
platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
Details

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names

The hp-bioscfg driver attempts to register kobjects with empty names when the HP BIOS returns attributes with empty name strings. This causes multiple kernel warnings:

kobject: (00000000135fb5e6): attempted to be registered with empty name! WARNING: CPU: 14 PID: 3336 at lib/kobject.c:219 kobjectaddinternal+0x2eb/0x310

Add validation in hpinitbiosbufferattribute() to check if the attribute name is empty after parsing it from the WMI buffer. If empty, log a debug message and skip registration of that attribute, allowing the module to continue processing other valid attributes.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23131.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a34fc329b1895fc8a6eb12099adc47009421ba6a
Fixed
29917c80aa96a25cbcf5876fd774a1cfd72b01a9
Fixed
6476be59b7162b891b7bddbd0c2924d87379ef6c
Fixed
800b2767905d6b409b8bbe357121970f0b489a89
Fixed
fdee1b09721605f532352628d0a24623e7062efb

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23131.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.122
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.68
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23131.json"