CVE-2026-45930

Analyzed Analyzed - Analysis Complete

Linux Kernel Netlink Neighbor Data Initialization Flaw

Publication date: 2026-05-27

Last updated on: 2026-06-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are initialised Syed Faraz Abrar (@farazsth98) from Zellic, and Pumpkin (@u1f383) from DEVCORE Research Team working with Trend Micro Zero Day Initiative report that a RTM_GETNEIGH will return uninitalised data in the pad bytes of the ndmsg data. Ensure we're initialising the netlink data to zero, in the link, addr and neigh response messages.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-25

Generated

2026-07-07

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-45930

EUVD

EUVD-2026-32214

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 6.19.4 (exc)
linux	linux_kernel	From 5.15 (inc) to 5.15.210 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.176 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.35 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.143 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.93 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's net subsystem, specifically in the mctp component. When a RTM_GETNEIGH request is made, the system may return uninitialized data in the padding bytes of the ndmsg data structure. This happens because the netlink response messages were not properly initialized to zero, potentially exposing leftover memory data.

The fix ensures that netlink data in link, address, and neighbor response messages are properly initialized to zero before being sent.

Impact Analysis

This vulnerability can lead to the unintended disclosure of kernel memory contents through the uninitialized padding bytes in netlink response messages. An attacker or user querying the RTM_GETNEIGH message could potentially access sensitive or leftover data from kernel memory, which might include information that should remain confidential.

Hi! I’m here to help you understand CVE-2026-45930. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70