CVE-2026-98097

The Linux kernel contains a vulnerability in the tipc component where RESET/ACTIVATE messages could transmit random pad bytes to a remote system. This occurs because the interface name is passed in a fixed-length buffer using strcpy(), which fails to properly zero-pad the remaining bytes. The iss...

CVE-2026-98097

In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in a fixed length TIPCMAXIFNAME buffer. Replace the strcpydata, l-ifname with memcpy so that the pad bytes are actually written l-ifname is...

PT-2026-98760

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the TIPC Transparent Inter-Process Communication module where RESET and ACTIVATE messages may transmit random pad bytes to a remote system. This occurs because the...

CVE-2026-46043 RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that the incoming packet is at least headersizepkt bytes long before payloadsize is used. However, payloadsize subtracts both the...

CVE-2026-45930

CVE-2026-45930 is a Linux kernel netlink issue in net: mctp where RTM_GETNEIGH could return uninitialised data in ndmsg pad bytes. The root cause is not fully detailed here beyond the description, but connected OSV entries indicate patches to fix nlmsg initialisation in link/addr/neigh responses....