CVE-2026-98935None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak The struct rtc_wkalrm has padding holes after the 'pending' member. When returned to userspace …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
In the Linux kernel, the following vulnerability has been resolved:
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak
The struct rtc_wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized kernel stack data residing in these holes may be leaked.
Zero-initialize the struct at declaration to eliminate this information leak risk.
Fixes smatch warnings:
Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < a2215eb3cbbd3d9d73cc18c08e3ef53f903443cbLinux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < beda3c9730ad3087d01aa1d0415c40942042ec87Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 00dc50cede96738dadc64b20e671186cddb8a58dLinux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 2838d7bbb551861c25187dfb581ed6e7a56762e9Linux >= 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 < 0ee5c5d804d592a8328a425b9274487d393d3a05Linux 5.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets