All vulnerabilities
CVE-2026-98935

Linux: rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in00dc50cede96738dadc64b20e671186cddb8a58dAlso 2838d7bbb551861c25187dfb581ed6e7a56762e9, 0ee5c5d804d592a8328a425b9274487d393d3a05CVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 00dc50cede96738dadc64b20e671186cddb8a58dLinuxCVE List
  • 2838d7bbb551861c25187dfb581ed6e7a56762e9LinuxCVE List
  • 0ee5c5d804d592a8328a425b9274487d393d3a05LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

The struct rtc_wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC_WKALRM_RD ioctl, uninitialized kernel stack data residing in these holes may be leaked.

Zero-initialize the struct at declaration to eliminate this information leak risk.

Fixes smatch warnings:

  • drivers/rtc/dev.c:392 rtc_dev_ioctl() warn: check that 'alarm' doesn't

leak information (struct has a hole after 'pending')

Text from CVE List

Affected versions 12

  • Linuxaffected: 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 before a2215eb3cbbd3d9d73cc18c08e3ef53f903443cbCVE List
  • Linuxaffected: 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 before beda3c9730ad3087d01aa1d0415c40942042ec87CVE List
  • Linuxaffected: 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 before 00dc50cede96738dadc64b20e671186cddb8a58dCVE List
  • Linuxaffected: 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 before 2838d7bbb551861c25187dfb581ed6e7a56762e9CVE List
  • Linuxaffected: 36e14f5fdfdf7cec8887b7ff69cd9bb5051ecf62 before 0ee5c5d804d592a8328a425b9274487d393d3a05CVE List
  • Linuxaffected: 5.0CVE List
  • Linuxunaffected: all versions before 5.0CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5