CVE-2026-98097 PUBLISHED

tipc: Dont send random pad bytes in RESET/ACTIVATE messages

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

tipc: Dont send random pad bytes in RESET/ACTIVATE messages

The interface name is passed in a fixed length (TIPC_MAX_IF_NAME) buffer. Replace the strcpy(data, l->if_name) with memcpy() so that the pad bytes are actually written (l->if_name[] is zero padded) rather than sending random bytes from the skb to the remote system.

Replace two other strcpy() with strscpy().

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from e74a386d70c793ef44678b44b021c99094b28c47 to 48033a89356b8ae21a94db70c79bb6fcc91a23c2 (excl.)
  • affected from e74a386d70c793ef44678b44b021c99094b28c47 to 4ab2977323d5f068a872126f7818d1aeb9e9ca0d (excl.)
  • affected from e74a386d70c793ef44678b44b021c99094b28c47 to bee1459e57f2e0bd240c62f35c0a284291e27971 (excl.)
  • affected from e74a386d70c793ef44678b44b021c99094b28c47 to 81c600c26302a27852ed8b19c5f2f647ea3555c9 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.6 is affected
  • unaffected from 0 to 4.6 (excl.)
  • unaffected from 6.12.111 to 6.12.* (incl.)
  • unaffected from 6.18.53 to 6.18.* (incl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc2 to * (incl.)

References