CVE-2026-53082

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sixpack receive buf() function where bytes with TTY error flags are not properly skipped. The function iterates through the flags buffer without advancing the data pointer cp, causing the original count to be passed to sixpack decode(). Consequently, sixpack decode() processes bytes that should have been ignored. Because the TTY layer does not guarantee that cp[i] contains a meaningful value when fp[i] is set, this leads to an uninitialized value read reported by KMSAN (Kernel Memory Sanitizer), a tool used to detect uninitialized memory access in the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.