Use of Uninitialized Variable in Linux kernel - CVE-2026-98322
Published: October 8, 2026
Vulnerability identifier: #VU153954
CSH Severity: Low
CVSS v4: 0 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-98322
CWE-ID: CWE-457
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause uninitialized stack data to be used during IPv4 address mapping.
The vulnerability exists due to use of an uninitialized variable in nft_nat_setup_netmap() when constructing an IPv4 netmap address. A local user can trigger IPv4 netmap processing to cause uninitialized stack data to be used during IPv4 address mapping.
Only the 4-byte IPv4 member of the 16-byte address union is initialized before the entire union is copied into the address range passed to nf_nat_setup_info(). The IPv6 path initializes all 16 bytes and is not affected.
Affected software
Linux kernel
How to mitigate CVE-2026-98322
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/0ce42c7b84032335abff9eac43762e4ca8224451
- https://git.kernel.org/stable/c/161f5860c92a8ec80b6bdff16e79d70dcd8afc5a
- https://git.kernel.org/stable/c/1c43f5db482f74b41987c39c9c375a5e767556eb
- https://git.kernel.org/stable/c/29365695842db0a97b701a43a09fad1b4f7ecf3e
- https://git.kernel.org/stable/c/7b9380c38c2fd2189416fa602bdbc5c8523b84b2
- https://git.kernel.org/stable/c/d313499df66159b4b7971d760d16729598ab7e5a
- https://git.kernel.org/stable/c/e4982c489ee359162eee3ece1fb36082648464a5
- https://git.kernel.org/stable/c/eb2030137dba3b59cbb5057a33af70488d6bc231