CVE-2026-49424
Low risk· EPSS 5%Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t, but does not zero the stack struct first. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information.
Risk Assessment
Kernel stack data leak may expose sensitive information such as memory addresses or fragments of other processes' data, potentially aiding further attacks.
Recommendation
Apply the vendor patch that ensures the siginfo_t struct is zeroed before use. Update the system to a patched version.
Original NVD description (English source)
The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information.