CVE-2026-98097

Summary

In the Linux kernel, the following vulnerability has been resolved:

tipc: Dont send random pad bytes in RESET/ACTIVATE messages

The interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer. Replace the strcpy(data, l->if_name) with memcpy() so that the pad bytes are actually written (l->if_name[] is zero padded) rather than sending random bytes from the skb to the remote system.

Replace two other strcpy() with strscpy().

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe74a386d70c793ef44678b44b021c99094b28c47 < 48033a89356b8ae21a94db70c79bb6fcc91a23c2affected
LinuxLinuxe74a386d70c793ef44678b44b021c99094b28c47 < 4ab2977323d5f068a872126f7818d1aeb9e9ca0daffected
LinuxLinuxe74a386d70c793ef44678b44b021c99094b28c47 < bee1459e57f2e0bd240c62f35c0a284291e27971affected
LinuxLinuxe74a386d70c793ef44678b44b021c99094b28c47 < 81c600c26302a27852ed8b19c5f2f647ea3555c9affected
LinuxLinux4.6affected
LinuxLinux0 < 4.6unaffected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2.7 <= 7.2.*unaffected
LinuxLinux7.3-rc2 <= *unaffected

Weaknesses

References