CVE-2026-98935
- Source
- https://cve.org/CVERecord?id=CVE-2026-98935
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98935.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-98935
- Downstream
- Related
- Published
- 2026-10-23T12:11:46Z
- Modified
- 2026-11-04T14:27:32Z
- Summary
- rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
The struct rtc_wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized kernel stack data residing in these holes may be leaked.
Zero-initialize the struct at declaration to eliminate this information leak risk.
Fixes smatch warnings:
- drivers/rtc/dev.c:392 rtc_dev_ioctl() warn: check that 'alarm' doesn't leak information (struct has a hole after 'pending')
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98935.json" }- References
-
- https://git.kernel.org/stable/c/00dc50cede96738dadc64b20e671186cddb8a58d
- https://git.kernel.org/stable/c/0ee5c5d804d592a8328a425b9274487d393d3a05
- https://git.kernel.org/stable/c/2838d7bbb551861c25187dfb581ed6e7a56762e9
- https://git.kernel.org/stable/c/a2215eb3cbbd3d9d73cc18c08e3ef53f903443cb
- https://git.kernel.org/stable/c/beda3c9730ad3087d01aa1d0415c40942042ec87
- https://git.kernel.org/stable/c/f84eb9b7b0feeb267a174237d70a857042ce0158
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98935.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-98935
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62Fixedf84eb9b7b0feeb267a174237d70a857042ce0158Fixeda2215eb3cbbd3d9d73cc18c08e3ef53f903443cbFixedbeda3c9730ad3087d01aa1d0415c40942042ec87Fixed00dc50cede96738dadc64b20e671186cddb8a58dFixed2838d7bbb551861c25187dfb581ed6e7a56762e9Fixed0ee5c5d804d592a8328a425b9274487d393d3a05
Linux / Kernel
Package
- Name
- Kernel