PT-2026-43797 · Linux · Linux Kernel

Farazsth98 + 3 · CVE-2026-45930 · Published 2026-05-27 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the MCTP (Management Component Transport Protocol) implementation where RTM GETNEIGH requests return uninitialized data within the padding bytes of the ndmsg data. This occurs because netlink data in the link, address, and neighbor response messages were not properly initialized to zero.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-45930

ECHO-7F21-BCEA-BF34

Affected Products

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45930.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45930 · Vendor Advisory
• https://git.kernel.org/stable/c/6fb6a97c86abb8592158088afaea0eb464cf9de1 · Patch
• https://git.kernel.org/stable/c/976612471a9e6ead6ceffc241e4d0a1aac90b36a · Patch
• https://git.kernel.org/stable/c/963537a26fd892f7e414a091f807b44aeee97a7d · Patch
• https://git.kernel.org/stable/c/a6a9bc544b675d8b5180f2718ec985ad267b5cbf · Patch
• https://git.kernel.org/stable/c/c4f840437e7641764de15f2de951ac8335d641f1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-45930 · Security Note
• https://git.kernel.org/stable/c/54ed418de62a148a655262da682a050fa05f7924 · Patch
• https://ubuntu.com/security/CVE-2026-45930 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-45930 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-45930 · Vendor Advisory
• https://git.kernel.org/stable/c/b37da3ac099e145bcd3be82c745a8d335772e3af · Patch
• https://cve.org/CVERecord?id=CVE-2026-45930 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-45930 · Vendor Advisory