CVE-2026-72441

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An information leak occurs in the kernel when handling IEEE 802.15.4 packets. The issue arises because the pan id field of struct ieee802154 addr remains uninitialized when the address mode is set to IEEE802154 ADDR NONE. During the execution flow, ieee802154 hdr get addr() only sets the mode field, leaving pan id with uninitialized stack memory. This data is subsequently processed by ieee802154 addr to sa() within the dgram recvmsg() function and finally copied to user space via move addr to user(), resulting in the leak of uninitialized kernel bytes. The vulnerability involves the following functions: ieee802154 rx handle packet(), ieee802154 hdr pull(), ieee802154 hdr get addr(), dgram recvmsg(), and move addr to user().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict the use of the dgram recvmsg() function or the IEEE 802.15.4 network module to minimize the risk of information leakage.