CVE-2026-52985
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-06-24
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function. Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.
Weakness Classification (1)
Affected Software (11)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < 175556c049eaec14efde8c6475e763b7579b9de7 |
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < 6e2cfd0904976e701d7a76b86b694e72af230ab0 |
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < 1b7b6ae0e93b8d512e208b1378d74af052e4f4e7 |
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < 818f7673ed7f4a29d4b9cee8184c47d6e57162b4 |
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < 978ca6ff789f1f19c03288ac20cc1f4774e88490 |
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < 750d0091bebf44975421268d37484ef87060d263 |
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < bc6002865e8c4fcf9e94975f7cf023448d8764e2 |
| Linux | Linux | da58f90f11f597520f226caff1d3cfc115abedc9 < 35eaa6d8d6c2ee65e96f507add856e0eacf24591 |
| Linux | Linux | 5.4 |
| linux | linux_kernel | 5.4 – 5.10.258 |
| linux | linux_kernel | 7.1 |