CVE-2026-46132
kernel: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 28, 2026
Updated · September 24, 2026
Description
A flaw was found in the Linux kernel's rtnetlink component. The rtnl_fill_vfinfo function declares a structure on the stack without full initialization. When processing RTM_GETLINK requests with a specific attribute, an unprivileged local process can exploit this to read up to 26 bytes of uninitialized kernel stack memory. This information disclosure can expose sensitive data, including return addresses and other transient data, potentially aiding further attacks.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-908 · Use of Uninitialized Resource