CVE-2026-52985

ANALYSIS PENDING

netdevsim: zero initialize struct iphdr in dummy sk_buff

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function. Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.

References (8)

Core 8

Scores

EPSS 0.0018
EPSS Percentile 7.3%

Details

Status published
Products (25)
linux/Kernel 5.11.0 - 5.15.209linux
linux/Kernel 5.16.0 - 6.1.175linux
linux/Kernel 5.4.0 - 5.10.258linux
linux/Kernel 6.13.0 - 6.18.33linux
linux/Kernel 6.19.0 - 7.0.10linux
linux/Kernel 6.2.0 - 6.6.141linux
linux/Kernel 6.7.0 - 6.12.91linux
Linux/Linux < 5.4
Linux/Linux 5.10.258 - 5.10.*
Linux/Linux 5.15.209 - 5.15.*
... and 15 more
Published Jun 24, 2026
Tracked Since Jun 24, 2026