PT-2026-43797

CVE-2026-45930

·

Published

2026-05-27

·

Updated

2026-10-29

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the MCTP (Management Component Transport Protocol) implementation where RTM GETNEIGH requests return uninitialized data within the padding bytes of the ndmsg data. This occurs because netlink data in the link, address, and neighbor response messages were not properly initialized to zero.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
AZL-88658
ECHO-7F21-BCEA-BF34
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
SUSE-SU-2026:24371-1
SUSE-SU-2026:24379-1
SUSE-SU-2026:4935-1
SUSE-SU-2026:4940-1
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8903-1
USN-8903-2
USN-8904-1
USN-8905-1
USN-8905-2
USN-8906-1
ZDI-26-690
Found an issue in the description? Have something to add? Feel free to write us 👾