Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-52985

netdevsim: zero initialize struct iphdr in dummy sk_buff

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function. Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • da58f90f11f597520f226caff1d3cfc115abedc9 to < 175556c049eaec14efde8c6475e763b7579b9de7affected
  • da58f90f11f597520f226caff1d3cfc115abedc9 to < 6e2cfd0904976e701d7a76b86b694e72af230ab0affected
  • da58f90f11f597520f226caff1d3cfc115abedc9 to < 1b7b6ae0e93b8d512e208b1378d74af052e4f4e7affected
  • da58f90f11f597520f226caff1d3cfc115abedc9 to < 818f7673ed7f4a29d4b9cee8184c47d6e57162b4affected
  • da58f90f11f597520f226caff1d3cfc115abedc9 to < 978ca6ff789f1f19c03288ac20cc1f4774e88490affected
  • da58f90f11f597520f226caff1d3cfc115abedc9 to < 750d0091bebf44975421268d37484ef87060d263affected
  • da58f90f11f597520f226caff1d3cfc115abedc9 to < bc6002865e8c4fcf9e94975f7cf023448d8764e2affected
  • da58f90f11f597520f226caff1d3cfc115abedc9 to < 35eaa6d8d6c2ee65e96f507add856e0eacf24591affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References