Security
Loading…

CVE-2026-98097

UNKNOWN
Description

In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages The interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer. Replace the strcpy(data, l->if_name) with memcpy() so that the pad bytes are actually written (l->if_name[] is zero padded) rather than sending random bytes from the skb to the remote system. Replace two other strcpy() with strscpy().

Timeline
Published:September 25th, 2026 11:17 AM
Last modified:September 30th, 2026 2:10 PM
CVSS Scoring

No CVSS v3 score available

Source: NIST NVD · Data may lag official sources by up to one minute