CVE-2026-52985
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function. Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJun 24, 2026
First seenJun 24, 2026
Weakness typeCWE-908CWE-908
How to fix
Update
- linux linux_kernel5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10 or later
Patches
- git.kernel.org/stable/c/175556c049eaec14efde8c6475e763b7579b9de7
- git.kernel.org/stable/c/1b7b6ae0e93b8d512e208b1378d74af052e4f4e7
- git.kernel.org/stable/c/35eaa6d8d6c2ee65e96f507add856e0eacf24591
- git.kernel.org/stable/c/6e2cfd0904976e701d7a76b86b694e72af230ab0
- git.kernel.org/stable/c/750d0091bebf44975421268d37484ef87060d263
- git.kernel.org/stable/c/818f7673ed7f4a29d4b9cee8184c47d6e57162b4
- git.kernel.org/stable/c/978ca6ff789f1f19c03288ac20cc1f4774e88490
- git.kernel.org/stable/c/bc6002865e8c4fcf9e94975f7cf023448d8764e2
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.4 ≤ v < 5.10.258, 5.11 ≤ v < 5.15.209, 5.16 ≤ v < 6.1.175, 6.2 ≤ v < 6.6.141, 6.7 ≤ v < 6.12.91, 6.13 ≤ v < 6.18.33, 6.19 ≤ v < 7.0.10, 7.1 | 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.