CVE-2026-52985

netdevsim: zero initialize struct iphdr in dummy sk_buff

published June 24, 2026

CVSS
—
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: zero initialize struct iphdr in dummy sk_buff

Syzbot reports a KMSAN uninit-value originating from

nsim_dev_trap_skb_build, with the allocation also

being performed in the same function.

Fix this by calling skb_put_zero instead of skb_put to

guarantee zero initialization of the whole IP header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00123 · 1.9th percentile
Published
2026-06-24T16:28Z
EPSS history
Timeline
  • 24 JUN 16:28Z
    netdevsim: zero initialize struct iphdr in dummy sk_buff
    cvelistv5