NetSight
IP …
medium5.3

CVE-2026-98097

In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in…

Impact

In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer. Replace the strcpy(data, l->if_name) with memcpy() so that the pad bytes are actually written (l->if_name[] is zero padded) rather than sending random bytes from the skb to the remote system. Replace two other strcpy() with strscpy().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.6 before 6.6.160
from 6.7 before 6.12.111
from 6.13 before 6.18.53
from 6.19 before 7.2.7
Version 7.3

References