Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64553

net: psample: fix info leak in PSAMPLE_ATTR_DATA

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA psample open codes nla_put() presumably to avoid wiping the data with 0s just to override it with packet data. This open coding is missing clearing the pad, however, each netlink attr is padded to 4B and data_len may not be divisible by 4B.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6ae0a6286171154661b74f7f550f9441c6008424 to < 0d3ea2ccddda442077fc44f11d873209c97ec50baffected
  • 6ae0a6286171154661b74f7f550f9441c6008424 to < 7fe7e6949964aa8ee6305f09db2dc9eede977bb3affected
  • 6ae0a6286171154661b74f7f550f9441c6008424 to < e2fa322782a2d7d8078f7bb20817e0aa9f7c32e9affected
  • 6ae0a6286171154661b74f7f550f9441c6008424 to < befe1ebe7fc2c65c80074bc34ceeb0a721ed3cd2affected
  • 6ae0a6286171154661b74f7f550f9441c6008424 to < 48930f6c59fd0056c2de46ce52bfe27d9c9e5eb6affected
  • 6ae0a6286171154661b74f7f550f9441c6008424 to < a6cfb924ad74efce254e99c197d2e3863de70868affected
  • 6ae0a6286171154661b74f7f550f9441c6008424 to < 794a0d8bdbb39e083ed42caccb86d687a9b53570affected
  • 6ae0a6286171154661b74f7f550f9441c6008424 to < aedd02af1f8b0bceb7f42f5a21c41634ca9ed390affected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References