{ "cveId": "CVE-2026-98584", "url": "https://patchblox.com/security/cve/CVE-2026-98584", "summary": "CVE-2026-98584 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2026-98584, released October 19, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "net/sched: fix potential stack infoleak in em_text_dump()", "description": "In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in em_text_dump() em_text_dump() allocates struct tcf_em_text on the stack without zeroing it. strscpy() writes the algorithm name and a NUL terminator into conf.algo[], leaving the remaining bytes uninitialised. nla_put_nohdr() then copies the full struct to the netlink response. KMSAN on Linux 7.2-rc6 reports two kernel-infoleak splats from this path, one triggered via \u0022tc filter show\u0022 and one via a raw RTM_GETTFILTER dump: BUG: KMSAN: kernel-infoleak in _copy_to_iter\u002B0x1c9/0x2620 nla_put_nohdr\u002B0x83/0x130 em_text_dump\u002B0x291/0x550 Local variable conf created at: em_text_dump\u002B0x5d/0x550 Bytes 168-179 of 199 are uninitialized I am not certain whether this constitutes a real security problem in practice: the test was conducted in a controlled KMSAN environment and the leaked stack bytes may or may not carry sensitive data on actual production kernels. I am reporting it because KMSAN flagged it as a kernel-infoleak and the fix is straightforward. I can provide a userspace reproducer on request. The original code used strncpy() which zero-pads to the destination size. Commit b04202d6065c (\u0022net/sched: replace strncpy with strscpy\u0022) replaced it with strscpy(), which does not pad, creating this condition. Zero-initialising the struct closes it.", "published": "2026-10-18T16:17:10Z", "severity": "important", "epss": 0.00198, "epssPercentile": 0.09618, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98584", "fixes": [ { "platform": "linux", "product": "bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel-livepatch-6.18.56-125.164", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.2.9-1", "fix": "DEBIAN-CVE-2026-98584", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98584", "released": "2026-10-19T16:27:52Z" }, { "platform": "linux", "product": "microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" }, { "platform": "linux", "product": "python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.56-125.164.amzn2023", "fix": "ALAS2023-2026-3251", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251", "released": "2026-11-07T01:06:52Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T19:38:12Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }