The Linux kernel component responsible for papr-hvpipe allocates a structure on the kernel stack but initializes only a subset of its fields. The remaining reserved padding remains uninitialized. When the structure is copied to user space, those bytes can leak kernel‑level data to an attacker, resulting in a local information‑disclosure vulnerability. The weakness is a classic use of uninitialized memory that may expose sensitive data.

The vulnerability is present in the Linux kernel's pseries/papr-hvpipe module. Any build that includes this module may be vulnerable. Information about the specific operating contexts, such as IBM Power PC systems, is not explicitly stated; it is inferred from the module name but is not directly provided in the description.

The CVSS score is 5.5, the EPSS score is less than 1%, and the vulnerability is not listed in the CISA KEV catalog. Because the flaw requires the copy_to_user path—typically exercised by the kernel when managing the hypervisor pipe API—the attack surface is limited to local processes that can exercise that interface. Nonetheless, the exposure of kernel stack data could leak privileged information. The lack of a publicly documented exploitation vector suggests moderate risk pending further analysis.