CyberRota Analysis
AI-GeneratedThe compat32 kevent() handler is vulnerable due to improper handling of a 64-bit kevent struct, resulting in uninitialized data being exposed in a 32-bit stack structure. This flaw allows unprivileged users to potentially access sensitive information from the kernel stack. Organizations utilizing affected systems should prioritize remediation to mitigate the risk of data leakage.
CVE
CVE-2026-49425
Severity
MEDIUM
CVSS
5.5
EPSS
0.11%
Original NVD Description
The compat32 kevent() handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information.
Related CVEs
Other vulnerabilities affecting the same vendor(s)