PT-2026-51879 · Linux · Linux

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-52985

NVD

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: zero initialize struct iphdr in dummy sk buff

Syzbot reports a KMSAN uninit-value originating from nsim dev trap skb build, with the allocation also being performed in the same function.

Fix this by calling skb put zero instead of skb put to guarantee zero initialization of the whole IP header.

Related Identifiers

CVE-2026-52985

Affected Products

Linux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-52985 · Security Note
• https://git.kernel.org/stable/c/bc6002865e8c4fcf9e94975f7cf023448d8764e2 · Note
• https://git.kernel.org/stable/c/175556c049eaec14efde8c6475e763b7579b9de7 · Note
• https://git.kernel.org/stable/c/818f7673ed7f4a29d4b9cee8184c47d6e57162b4 · Note
• https://git.kernel.org/stable/c/978ca6ff789f1f19c03288ac20cc1f4774e88490 · Note
• https://git.kernel.org/stable/c/1b7b6ae0e93b8d512e208b1378d74af052e4f4e7 · Note
• https://git.kernel.org/stable/c/6e2cfd0904976e701d7a76b86b694e72af230ab0 · Note
• https://git.kernel.org/stable/c/35eaa6d8d6c2ee65e96f507add856e0eacf24591 · Note
• https://git.kernel.org/stable/c/750d0091bebf44975421268d37484ef87060d263 · Note