CVE-2026-98495 net: arp: terminate device name before lookup

In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arpdev field may contain IFNAMSIZ bytes without a NUL terminator. Such input is passed to devgetbynamercu o...

CVE-2026-98495

The Linux kernel contains an out-of-bounds read vulnerability in the ARP ioctl functionality. The issue occurs because the kernel copies a user-provided struct arpreq into a stack object, where the arp_dev field can contain IFNAMSIZ bytes without a NUL terminator . When this input is processed by...

CVE-2026-98495 net: arp: terminate device name before lookup

In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arpdev field may contain IFNAMSIZ bytes without a NUL terminator. Such input is passed to devgetbynamercu o...