CVE-2026-64553

Received Received - Intake

net: psample info leak in Linux kernel

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA psample open codes nla_put() presumably to avoid wiping the data with 0s just to override it with packet data. This open coding is missing clearing the pad, however, each netlink attr is padded to 4B and data_len may not be divisible by 4B.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-27

Generated

2026-07-28

AI Q&A

2026-07-28

EPSS Evaluated

N/A

NVD

CVE-2026-64553

EUVD

EUVD-2026-49604

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a missing data clearing step in the PSAMPLE_ATTR_DATA attribute handling. The code uses nla_put() without properly wiping the padding bytes to zero before inserting packet data. Since netlink attributes are padded to 4-byte boundaries, if the data length isn't divisible by 4, uninitialized memory could be exposed in the padding area, leading to an information leak.

Detection Guidance

This vulnerability involves an information leak in the Linux kernel's psample subsystem due to improper padding in netlink attributes. Detection requires checking kernel versions and examining psample-related kernel code or logs for unusual data exposure.

Impact Analysis

This vulnerability could allow an attacker with local access to read small amounts of uninitialized kernel memory. While the impact is limited due to requiring local access, it may expose sensitive information like kernel pointers or other data that could aid in further attacks against the system.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Monitor vendor advisories for updates to your specific distribution. If patches are unavailable, consider disabling psample or restricting access to netlink sockets as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-64553. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70