> CVE-2026-98097

« BACK_TO_HOME
PUBLISHED
2026-09-25 11:17
MODIFIED
2026-09-25 11:17
EPSS (Prob. Exploit)
0.18%
Top 92.5%
DATA SOURCES:
NVD 🔗 2026-09-25 FIRST EPSS 🔗 2026-10-23 OSV 🔗 2026-09-30 MSRC 🔗 2026-09-29

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer. Replace the strcpy(data, l->if_name) with memcpy() so that the pad bytes are actually written (l->if_name[] is zero padded) rather than sending random bytes from the skb to the remote system. Replace two other strcpy() with strscpy().

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

tipc: Dont send random pad bytes in RESET/ACTIVATE messages

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
25/09/2026 11:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 3 weeks ago

> REFERENCES

https://git.kernel.org/stable/c/48033a89356b8ae21a94db70c79bb6fcc91a23c2
https://git.kernel.org/stable/c/4ab2977323d5f068a872126f7818d1aeb9e9ca0d
https://git.kernel.org/stable/c/81c600c26302a27852ed8b19c5f2f647ea3555c9
https://git.kernel.org/stable/c/bee1459e57f2e0bd240c62f35c0a284291e27971
« BACK_TO_HOME