CVE-2026-52985

netdevsim: zero initialize struct iphdr in dummy sk_buff

State: Published
Severity: Not scored
Published: Jun 24, 2026
Updated: Jun 24, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: zero initialize struct iphdr in dummy sk_buff

Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function.

Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	da58f90f11f597520f226caff1d3cfc115abedc9 to before 175556c049eaec14efde8c6475e763b7579b9de7Affected da58f90f11f597520f226caff1d3cfc115abedc9 to before 6e2cfd0904976e701d7a76b86b694e72af230ab0Affected da58f90f11f597520f226caff1d3cfc115abedc9 to before 1b7b6ae0e93b8d512e208b1378d74af052e4f4e7Affected da58f90f11f597520f226caff1d3cfc115abedc9 to before 818f7673ed7f4a29d4b9cee8184c47d6e57162b4Affected da58f90f11f597520f226caff1d3cfc115abedc9 to before 978ca6ff789f1f19c03288ac20cc1f4774e88490Affected da58f90f11f597520f226caff1d3cfc115abedc9 to before 750d0091bebf44975421268d37484ef87060d263Affected da58f90f11f597520f226caff1d3cfc115abedc9 to before bc6002865e8c4fcf9e94975f7cf023448d8764e2Affected da58f90f11f597520f226caff1d3cfc115abedc9 to before 35eaa6d8d6c2ee65e96f507add856e0eacf24591Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

da58f90f11f597520f226caff1d3cfc115abedc9 to before 175556c049eaec14efde8c6475e763b7579b9de7Affected
da58f90f11f597520f226caff1d3cfc115abedc9 to before 6e2cfd0904976e701d7a76b86b694e72af230ab0Affected
da58f90f11f597520f226caff1d3cfc115abedc9 to before 1b7b6ae0e93b8d512e208b1378d74af052e4f4e7Affected
da58f90f11f597520f226caff1d3cfc115abedc9 to before 818f7673ed7f4a29d4b9cee8184c47d6e57162b4Affected
da58f90f11f597520f226caff1d3cfc115abedc9 to before 978ca6ff789f1f19c03288ac20cc1f4774e88490Affected
da58f90f11f597520f226caff1d3cfc115abedc9 to before 750d0091bebf44975421268d37484ef87060d263Affected
da58f90f11f597520f226caff1d3cfc115abedc9 to before bc6002865e8c4fcf9e94975f7cf023448d8764e2Affected
da58f90f11f597520f226caff1d3cfc115abedc9 to before 35eaa6d8d6c2ee65e96f507add856e0eacf24591Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.