CVE-2026-98935None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak The struct rtc_wkalrm has padding holes after the 'pending' member. When returned to userspace …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
The struct rtc_wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized kernel stack data residing in these holes may be leaked.
Zero-initialize the struct at declaration to eliminate this information leak risk.
Fixes smatch warnings:
Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < a2215eb3cbbd3d9d73cc18c08e3ef53f903443cbLinux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < beda3c9730ad3087d01aa1d0415c40942042ec87Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 00dc50cede96738dadc64b20e671186cddb8a58dLinux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 2838d7bbb551861c25187dfb581ed6e7a56762e9Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 0ee5c5d804d592a8328a425b9274487d393d3a05Linux 5.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99001Nonedrm/xe/i2c: cancel the client work on remove
CVE-2026-98989Nonenamespace: check a recursive bind mount for mount namespace loops
CVE-2026-98988Nonenamespace: keep covered mounts covered in OPEN_TREE_NAMESPACE
CVE-2026-98992Nonenamespace: don't copy an unmounted mount tree
CVE-2026-98991Nonenamespace: queue a mount only once for mount notifications
CVE-2026-98990Nonenamespace: check a submount for references right before unmounting it