UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-98935
In the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak The struct rtc_wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized kernel stack data residing in these holes may be leaked. Zero-initialize the struct at declaration to eliminate this information leak risk. Fixes smatch warnings: - drivers/rtc/dev.c:392 rtc_dev_ioctl() warn: check that 'alarm' doesn't leak information (struct has a hole after 'pending')
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-23T14:24:59.572098+00:00
- Cve id
- CVE-2026-98935
- First seen by Signal
- 2026-10-23T14:28:01+00:00
- Name
- CVE-2026-98935
- Retrieved at
- 2026-10-23T14:28:01+00:00
- Published at
- 2026-10-23T13:17:14.377
- Last modified
- 2026-10-23T13:17:14.377
Explore deeper with Ninja Signal's threat intelligence graph