CVE-2026-49425
Low risk· EPSS 5%Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
The compat32 kevent() handler translates a 64-bit kevent struct into a stack-declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information.
Risk Assessment
A local attacker can access sensitive kernel data, which may aid in further attacks or compromise system confidentiality.
Recommendation
Apply the vendor patch that zeroes the stack struct before use in the compat32 kevent() handler.
Original NVD description (English source)
The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information.