-

CVE-2026-64553

net: psample: fix info leak in PSAMPLE_ATTR_DATA

In the Linux kernel, the following vulnerability has been resolved:

net: psample: fix info leak in PSAMPLE_ATTR_DATA

psample open codes nla_put() presumably to avoid wiping
the data with 0s just to override it with packet data.
This open coding is missing clearing the pad, however,
each netlink attr is padded to 4B and data_len may
not be divisible by 4B.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < 0d3ea2ccddda442077fc44f11d873209c97ec50b
Status affected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < 7fe7e6949964aa8ee6305f09db2dc9eede977bb3
Status affected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < e2fa322782a2d7d8078f7bb20817e0aa9f7c32e9
Status affected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < befe1ebe7fc2c65c80074bc34ceeb0a721ed3cd2
Status affected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < 48930f6c59fd0056c2de46ce52bfe27d9c9e5eb6
Status affected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < a6cfb924ad74efce254e99c197d2e3863de70868
Status affected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < 794a0d8bdbb39e083ed42caccb86d687a9b53570
Status affected
Version 6ae0a6286171154661b74f7f550f9441c6008424
Version < aedd02af1f8b0bceb7f42f5a21c41634ca9ed390
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.11
Status affected
Version 0
Version < 4.11
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.075
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0d3ea2ccddda442077fc44f11d873209c97ec50b
https://git.kernel.org/stable/c/7fe7e6949964aa8ee6305f09db2dc9eede977bb3
https://git.kernel.org/stable/c/e2fa322782a2d7d8078f7bb20817e0aa9f7c32e9
https://git.kernel.org/stable/c/befe1ebe7fc2c65c80074bc34ceeb0a721ed3cd2
https://git.kernel.org/stable/c/48930f6c59fd0056c2de46ce52bfe27d9c9e5eb6
https://git.kernel.org/stable/c/a6cfb924ad74efce254e99c197d2e3863de70868
https://git.kernel.org/stable/c/794a0d8bdbb39e083ed42caccb86d687a9b53570
https://git.kernel.org/stable/c/aedd02af1f8b0bceb7f42f5a21c41634ca9ed390