CVE-2026-49424
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/08/2026
Last modified:
19/08/2026
Description
The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct.<br />
<br />
An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information.