NetSight
IP …
medium5.5

CVE-2026-43035

In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an in…

Impact

In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak When building netlink messages, tc_chain_fill_node() never initializes the tcm_info field of struct tcmsg. Since the allocation is not zeroed, kernel heap memory is leaked to userspace through this 4-byte field. The fix simply zeroes tcm_info alongside the other fields that are already initialized.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19 before 5.10.253
from 5.11 before 5.15.203
from 5.16 before 6.1.168
from 6.2 before 6.6.134
from 6.7 before 6.12.81
from 6.13 before 6.18.22

Weakness classification

CWE-908

References