CVE-2026-68288

A flaw was found in the Linux kernel's drop_monitor module. This vulnerability allows for information disclosure due to uninitialized padding bytes in the NET_DM_ATTR_PAYLOAD attribute. When the packet payload length is not a multiple of four, these uninitialized bytes are leaked to user space. A local attacker could exploit this to obtain sensitive kernel memory information.

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because exploitation requires local access, exposes only up to three bytes of uninitialized padding per packet report, and does not grant elevated privileges or compromise system availability. The drop_monitor functionality is not enabled during standard system operations and is typically only engaged by privileged users running diagnostic tooling like dropwatch. Consequently, the practical risk to enterprise deployments is minimal under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.