Answer in brief
CVE-2026-52985 records a Unknown severity vulnerability in netdevsim: zero initialize struct iphdr in dummy sk_buff. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 5.4 | Not reported |
| Linux/Linuxgeneric | >=da58f90f11f597520f226caff1d3cfc115abedc9 <175556c049eaec14efde8c6475e763b7579b9de7 || >=da58f90f11f597520f226caff1d3cfc115abedc9 <6e2cfd0904976e701d7a76b86b694e72af230ab0 || >=da58f90f11f597520f226caff1d3cfc115abedc9 <1b7b6ae0e93b8d512e208b1378d74af052e4f4e7 || >=da58f90f11f597520f226caff1d3cfc115abedc9 <818f7673ed7f4a29d4b9cee8184c47d6e57162b4 || >=da58f90f11f597520f226caff1d3cfc115abedc9 <978ca6ff789f1f19c03288ac20cc1f4774e88490 || >=da58f90f11f597520f226caff1d3cfc115abedc9 <750d0091bebf44975421268d37484ef87060d263 || >=da58f90f11f597520f226caff1d3cfc115abedc9 <bc6002865e8c4fcf9e94975f7cf023448d8764e2 || >=da58f90f11f597520f226caff1d3cfc115abedc9 <35eaa6d8d6c2ee65e96f507add856e0eacf24591 | 175556c049eaec14efde8c6475e763b7579b9de7, 6e2cfd0904976e701d7a76b86b694e72af230ab0, 1b7b6ae0e93b8d512e208b1378d74af052e4f4e7, 818f7673ed7f4a29d4b9cee8184c47d6e57162b4, 978ca6ff789f1f19c03288ac20cc1f4774e88490, 750d0091bebf44975421268d37484ef87060d263, bc6002865e8c4fcf9e94975f7cf023448d8764e2, 35eaa6d8d6c2ee65e96f507add856e0eacf24591 |
Published upstream
Jun 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reports a KMSAN uninit-value originating from nsim_dev_trap_skb_build, with the allocation also being performed in the same function. Fix this by calling skb_put_zero instead of skb_put to guarantee zero initialization of the whole IP header.
Quoted source text, attributed separately from HOL analysis.