CVE-2026-58084

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An unprivileged local user can obtain uninitialized kernel stack memory, potentially disclosing sensitive kernel data. This occurs when creating a POSIX timer with CLOCK TAI and calling the timer settime(2) function. The issue stems from the kernel calling realtimer gettime() to retrieve the previous timer value; if no TAI offset is configured, the function fails, but because the error return is not checked, the uninitialized output buffer is copied to userspace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.