CVE-2026-98097

A flaw was found in the Linux kernel's Transparent Inter-Process Communication (TIPC) subsystem. This vulnerability allows information disclosure because the kernel fails to clear padding bytes in a fixed-size buffer when preparing network protocol messages. A remote peer or attacker on the network can inspect these messages to retrieve uninitialized kernel memory, potentially exposing sensitive system data.

This vulnerability is evaluated as having Moderate impact because it allows adjacent network peers to inspect uninitialized kernel memory, compromising system confidentiality. In default configurations of Red Hat Enterprise Linux, the TIPC kernel module is not loaded or enabled. Exploitation is therefore limited to environments where an administrator has explicitly configured and deployed TIPC networking.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.