EIP-2026-102642
PRE-CVELinux < 4.16.9 / < 4.14.41 - 4-byte Infoleak via Uninitialized Struct Field in compat adjtimex Syscall
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-102642. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates an information leak vulnerability in the Linux kernel's compat adjtimex syscall, where uninitialized memory from the kernel is leaked to userspace due to a missing memset() in compat_get_timex(). The PoC triggers the leak by invoking adjtimex with an invalid mode, causing an early bailout without writing to the tai field.
Description
Linux < 4.16.9 / < 4.14.41 - 4-byte Infoleak via Uninitialized Struct Field in compat adjtimex Syscall
Exploits (1)
This exploit demonstrates an information leak vulnerability in the Linux kernel's compat adjtimex syscall, where uninitialized memory from the kernel is leaked to userspace due to a missing memset() in compat_get_timex(). The PoC triggers the leak by invoking adjtimex with an invalid mode, causing an early bailout without writing to the tai field.