CVE-2026-64553

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An information leak exists in the psample module. The implementation uses open coding instead of the nla put() function to avoid zeroing data before overriding it with packet data. However, this approach fails to clear the padding for netlink attributes, which are padded to 4 bytes. If the data len variable is not divisible by 4 bytes, uninitialized memory may be leaked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.