CVE-2026-98584

A flaw was found in the Linux kernel's network traffic control subsystem. A local user can exploit this vulnerability to cause an information disclosure of kernel stack data. When dumping text search filter configurations, the kernel fails to initialize a stack structure before copying it into user-space response messages. A local user can query these filter details to view uninitialized kernel memory, potentially exposing sensitive system data.

This vulnerability is rated as Low severity because it is restricted to local read-only disclosure of small fragments of uninitialized kernel stack memory, requiring existing local access with no ability to alter system state or cause a denial of service. Triggering the condition requires querying network traffic control extended match filters. Furthermore, the vulnerable code is not present in supported Red Hat Enterprise Linux kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.