Data Leakage Vulnerability in Linux Kernel PSAMPLE Feature

CVE-2026-64553

What is CVE-2026-64553?

A vulnerability exists in the Linux kernel concerning the PSAMPLE feature, where the implementation fails to properly handle padding in netlink attributes. Specifically, the open coding of nla_put() does not clear the padding when populating the attribute with packet data. As a consequence, sensitive information can leak, potentially leading to unauthorized data exposure. Users should ensure their kernel is updated to the latest stable version to mitigate this issue.

References