CVE-2026-68288

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An information leak exists in the drop monitor component. The functions net dm packet report fill() and net dm hw packet report fill() manually construct the NET DM ATTR PAYLOAD attribute. While skb put() reserves space for the header and padding, only the actual payload length is copied. If the payload length is not a multiple of 4, the remaining 1 to 3 padding bytes remain uninitialized and are leaked to user space via the netlink message.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.