CVE-2026-43035None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When building netlink messages, tc_chain_fill_node() never initializ…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
When building netlink messages, tc_chain_fill_node() never initializes the tcm_info field of struct tcmsg. Since the allocation is not zeroed, kernel heap memory is leaked to userspace through this 4-byte field.
The fix simply zeroes tcm_info alongside the other fields that are already initialized.
Linux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 903c3405cfcc7700260e456ab66a5867586c9e69Linux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 71a3eda7e850ae844cb8993065f4e410c11a46ceLinux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 4ae5d23f51fb91d7d1140c6f1ba77ab0756054c3Linux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < e35f5195cd44ff4053fbc5d71ea97681728a0099Linux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < d6db08484c6cb3d4ad696246f9d288eceba2a078Linux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 906997ea3766c24fbbf9cc4bf17c047315bbd138Linux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < 1091b3c174441a52fdbb92e2fe00338f9371a91cLinux >= 32a4f5ecd7381f30ae3bb36dea77a150ba68af2e < e6e3eb5ee89ac4c163d46429391c889a1bb5e404Linux 4.19Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-90055NoneIn the Linux kernel, the following vulnerability has been resolved: usb: atm: usbatm: fix invalid ci_range initialization syzbot reported a shift-out-of-bounds in __vcc_connect(): UBSAN: shift-out-of-bounds in net/atm/common.c:382:3…
CVE-2026-90060NoneIn the Linux kernel, the following vulnerability has been resolved: ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol LED state layer tries to track the all associated kcontrol elements with naive assumptions that th…
CVE-2026-90168NoneRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-90196NoneIn the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: validate topology volume range before allocation SOF treats the topology mixer min and max values as non-negative indices into its volume table
CVE-2026-90209NoneIn the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix deadlock during unregister Unregistering an s390dbf debug area while one of the associated debugfs files is being written to can cause a deadlock: $ e…
CVE-2026-90221NoneIn the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing nci_core_init_rsp_packet_v1() and nci_core_init_rsp_packet_v2() parse the CORE_INIT_RSP packet witho…