Vulnpedia
← Search CVEs

CVE-2026-98205

N/A

Published 2026-10-06 · Last modified 2026-10-19

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - zero absinfo before partial copy in EVIOCSABS The EVIOCSABS handler copies at most the user supplied ioctl size into an uninitialized on-stack struct input_absinfo: if (copy_from_user(&abs, p, min_t(size_t, size, sizeof(struct input_absinfo)))) The size comes from _IOC_SIZE() of the ioctl command and is therefore fully controlled by userspace. A short size leaves the trailing part of the structure holding whatever was on the kernel stack, and the whole structure is then stored into the device: dev->absinfo[t] = abs; EVIOCGABS hands that back to userspace, disclosing the stale stack bytes. Only the resolution field is currently cleared, which covers the legacy struct layout but not an arbitrarily short size. Zero the structure before the copy so any part not supplied by the caller reads back as zero. The existing resolution fixup is kept, since it also handles a size that partially overlaps that field.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 7th percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

—CVSS · not scored

  • No impact metrics

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Linux

Products Linux

Weakness (CWE)

Not classified.

CVSS vector

Not yet scored.

References and research data (JSON)

Vendor product assessments

Showing 32 of 277 vendor product statements; 245 omitted. Read the full vendor advisory.

  • kernel as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-debug-core as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-core

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-doc as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-doc

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-64k-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-uki-virt as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-uki-virt

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel.src as a component of Red Hat Enterprise Linux 10 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel?arch=src

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-debug as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • perf as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/perf

    • no fix planned: Out of support scope
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-doc as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-doc

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-doc as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-doc

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel.src as a component of Red Hat Enterprise Linux 7 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel?arch=src

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-debug as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-ipaclones-internal

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-devel

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-modules-internal

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-zfcpdump-devel

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-64k as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-64k-debug-modules-internal as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-64k-debug-modules-internal

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-abi-stablelists as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-abi-stablelists

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-ipaclones-internal as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-ipaclones-internal

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-64k-debug as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-64k-debug-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-debug-modules-partner

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-64k-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-64k-modules-partner

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-debug-modules-extra as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-modules-extra

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-modules-internal

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-uki-virt-addons as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-uki-virt-addons

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • kernel-zfcpdump-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-zfcpdump-modules-partner

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00
  • openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known affected

    Vendor assessment for this product only.

    pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9

    • none available: Affected
    Red Hat · CVE-2026-98205 · Updated 2026-10-09T08:55:15+00:00

References

Advisories

Technical & other

Sources: NVD · CVE.org · EPSS