CVE-2026-45930

net: mctp: ensure our nlmsg responses are initialised

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
2.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: mctp: ensure our nlmsg responses are initialised

Syed Faraz Abrar (@farazsth98) from Zellic, and Pumpkin (@u1f383) from

DEVCORE Research Team working with Trend Micro Zero Day Initiative

report that a RTM_GETNEIGH will return uninitalised data in the pad

bytes of the ndmsg data.

Ensure we're initialising the netlink data to zero, in the link, addr

and neigh response messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00135 · 2.7th percentile
Published
2026-05-27T12:17Z
EPSS history
Timeline
  • 27 MAY 12:17Z
    net: mctp: ensure our nlmsg responses are initialised
    cvelistv5