---
id: CVE-2026-98935
title: 'rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

  The struct rtc_wkalrm has padding holes after the 'pending' member.
  When returned to userspace …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 <
    a2215eb3cbbd3d9d73cc18c08e3ef53f903443cb
  - >-
    Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 <
    beda3c9730ad3087d01aa1d0415c40942042ec87
  - >-
    Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 <
    00dc50cede96738dadc64b20e671186cddb8a58d
  - >-
    Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 <
    2838d7bbb551861c25187dfb581ed6e7a56762e9
  - >-
    Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 <
    0ee5c5d804d592a8328a425b9274487d393d3a05
  - Linux 5.0
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:11:46.041Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98935'
references:
  - url: 'https://git.kernel.org/stable/c/a2215eb3cbbd3d9d73cc18c08e3ef53f903443cb'
  - url: 'https://git.kernel.org/stable/c/beda3c9730ad3087d01aa1d0415c40942042ec87'
  - url: 'https://git.kernel.org/stable/c/00dc50cede96738dadc64b20e671186cddb8a58d'
  - url: 'https://git.kernel.org/stable/c/2838d7bbb551861c25187dfb581ed6e7a56762e9'
  - url: 'https://git.kernel.org/stable/c/0ee5c5d804d592a8328a425b9274487d393d3a05'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.563Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

The struct rtc_wkalrm has padding holes after the 'pending' member.
When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized
kernel stack data residing in these holes may be leaked.

Zero-initialize the struct at declaration to eliminate this information
leak risk.

Fixes smatch warnings:
- drivers/rtc/dev.c:392 rtc_dev_ioctl() warn: check that 'alarm' doesn't
  leak information (struct has a hole after 'pending')

## Affected

- `Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < a2215eb3cbbd3d9d73cc18c08e3ef53f903443cb`
- `Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < beda3c9730ad3087d01aa1d0415c40942042ec87`
- `Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 00dc50cede96738dadc64b20e671186cddb8a58d`
- `Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 2838d7bbb551861c25187dfb581ed6e7a56762e9`
- `Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 0ee5c5d804d592a8328a425b9274487d393d3a05`
- `Linux 5.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.