CVE-2026-45930EPSS p7.2%
CVE-2026-45930CVE-2026-45930
Description
In the Linux kernel, the following vulnerability has been resolved:
net: mctp: ensure our nlmsg responses are initialised
Syed Faraz Abrar (@farazsth98) from Zellic, and Pumpkin (@u1f383) from
DEVCORE Research Team working with Trend Micro Zero Day Initiative
report that a RTM_GETNEIGH will return uninitalised data in the pad
bytes of the ndmsg data.
Ensure we're initialising the netlink data to zero, in the link, addr
and neigh response messages.
Scoring
| EPSS | 0.18% probability of exploitation · percentile 7.2% · 2026-06-19T12:03:05Z |
| Last modified | 2026-06-19 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.