CVE-2026-52985

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: zero initialize struct iphdr in dummy sk_buff

Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function.

Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
LinuxLinux>= da58f90f11f597520f226caff1d3cfc115abedc9, < 175556c049eaec14efde8c6475e763b7579b9de7; >= da58f90f11f597520f226caff1d3cfc115abedc9, < 6e2cfd0904976e701d7a76b86b694e72af230ab0; >= da58f90f11f597520f226caff1d3cfc115abedc9, < 1b7b6ae0e93b8d512e208b1378d74af052e4f4e7; >= da58f90f11f597520f226caff1d3cfc115abedc9, < 818f7673ed7f4a29d4b9cee8184c47d6e57162b4; >= da58f90f11f597520f226caff1d3cfc115abedc9, < 978ca6ff789f1f19c03288ac20cc1f4774e88490; >= da58f90f11f597520f226caff1d3cfc115abedc9, < 750d0091bebf44975421268d37484ef87060d263; >= da58f90f11f597520f226caff1d3cfc115abedc9, < bc6002865e8c4fcf9e94975f7cf023448d8764e2; >= da58f90f11f597520f226caff1d3cfc115abedc9, < 35eaa6d8d6c2ee65e96f507add856e0eacf24591
LinuxLinux5.4

References

Timeline

Published
Jun 24, 2026
Last modified
Nov 6, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-529869.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe pCVE-2026-529877.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_adCVE-2026-529887.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phCVE-2026-529899.8In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers CVE-2026-52995.5ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCVE-2026-529905.5In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotify_recalc_mask() fsnotify_CVE-2026-529917.8In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressure write A potentiaCVE-2026-529927.8In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfs_validate_bblk() Reject ADFS disc recoCVE-2026-529939.8In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potCVE-2026-529945.5In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting virtio_transporCVE-2026-529955.5In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handing it to visitors rds_fCVE-2026-529965.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open k
CVE-2026-52985: Medium severity, CVSS 5.5 | Vulnix