Riskcovery

CVE-2026-98097

tipc: Dont send random pad bytes in RESET/ACTIVATE messages

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 21, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tipc: Dont send random pad bytes in RESET/ACTIVATE messages

The interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer. Replace the strcpy(data, l->if_name) with memcpy() so that the pad bytes are actually written (l->if_name[] is zero padded) rather than sending random bytes from the skb to the remote system.

Replace two other strcpy() with strscpy().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e74a386d70c793ef44678b44b021c99094b28c47 to before 3dbb628cfc592a4148d8136dcda1f706cdcad4f3Affected
  • e74a386d70c793ef44678b44b021c99094b28c47 to before 48033a89356b8ae21a94db70c79bb6fcc91a23c2Affected
  • e74a386d70c793ef44678b44b021c99094b28c47 to before 4ab2977323d5f068a872126f7818d1aeb9e9ca0dAffected
  • e74a386d70c793ef44678b44b021c99094b28c47 to before bee1459e57f2e0bd240c62f35c0a284291e27971Affected
  • e74a386d70c793ef44678b44b021c99094b28c47 to before 81c600c26302a27852ed8b19c5f2f647ea3555c9Affected
LinuxLinux
  • 4.6Affected
  • before 4.6Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.