CVE-2026-98097

{"id": "CVE-2026-98097", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e74a386d70c793ef44678b44b021c99094b28c47", "lessThan": "3dbb628cfc592a4148d8136dcda1f706cdcad4f3", "versionType": "git"}, {"status": "affected", "version": "e74a386d70c793ef44678b44b021c99094b28c47", "lessThan": "48033a89356b8ae21a94db70c79bb6fcc91a23c2", "versionType": "git"}, {"status": "affected", "version": "e74a386d70c793ef44678b44b021c99094b28c47", "lessThan": "4ab2977323d5f068a872126f7818d1aeb9e9ca0d", "versionType": "git"}, {"status": "affected", "version": "e74a386d70c793ef44678b44b021c99094b28c47", "lessThan": "bee1459e57f2e0bd240c62f35c0a284291e27971", "versionType": "git"}, {"status": "affected", "version": "e74a386d70c793ef44678b44b021c99094b28c47", "lessThan": "81c600c26302a27852ed8b19c5f2f647ea3555c9", "versionType": "git"}], "programFiles": ["net/tipc/link.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.6"}, {"status": "unaffected", "version": "0", "lessThan": "4.6", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.160", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.111", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.53", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.2.7", "versionType": "semver", "lessThanOrEqual": "7.2.*"}, {"status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/tipc/link.c"], "defaultStatus": "affected"}]}], "published": "2026-09-25T11:17:39.490", "references": [{"url": "https://git.kernel.org/stable/c/3dbb628cfc592a4148d8136dcda1f706cdcad4f3", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/48033a89356b8ae21a94db70c79bb6fcc91a23c2", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/4ab2977323d5f068a872126f7818d1aeb9e9ca0d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/81c600c26302a27852ed8b19c5f2f647ea3555c9", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/bee1459e57f2e0bd240c62f35c0a284291e27971", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Dont send random pad bytes in RESET/ACTIVATE messages\n\nThe interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer.\nReplace the strcpy(data, l->if_name) with memcpy() so that the\npad bytes are actually written (l->if_name[] is zero padded)\nrather than sending random bytes from the skb to the remote system.\n\nReplace two other strcpy() with strscpy()."}], "lastModified": "2026-10-28T19:06:51.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "300CFCC1-7F3A-4596-B2B2-7B9820C65E3F", "versionEndExcluding": "6.6.160", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47BC31C9-3D9E-4B96-B5F8-291D6AD55D81", "versionEndExcluding": "6.12.111", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7561AABB-6D5A-4324-BC66-C6C6B012AFD8", "versionEndExcluding": "6.18.53", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19917B2D-B4B2-4416-A482-9C7C4929A921", "versionEndExcluding": "7.2.7", "versionStartIncluding": "6.19"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11E35E1B-5DB4-4AB9-9706-CD73B799EADF"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}