Medium 5.5Published Jun 24, 2026

CVE-2026-53082net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf

Updated under an hour ago (Oct 28, 2026, 1:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf sixpack_receive_buf() does not properly skip bytes with TTY error flags. The while loop iterates through the flags buffer but never advances the data pointer (cp), and passes the original count (including error bytes) to sixpack_decode(). This causes sixpack_decode() to process bytes that should have been skipped due to TTY errors. The TTY layer does not guarantee that cp[i] holds a meaningful value when fp[i] is set, so passing those positions to sixpack_decode() results in KMSAN reporting an uninit-value read. Fix this by processing bytes one at a time, advancing cp on each iteration, and only passing valid (non-error) bytes to sixpack_decode(). This matches the pattern used by slip_receive_buf() and mkiss_receive_buf() for the same purpose.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 24, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 1d3abf0c3ddeefc6f6d913aa129acc06fce8240a; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d4cceb5184538613572fb79319453f281b1eeacb; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2951656b0de00153f2687f3a093890bce72b6215; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e9cf4018d74237d142cd66243c821d13593270f0; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d9ce2a4b679122397d7f35bad7be46913ad1ca80; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 987af7625ceb1ee59d70eb0abd7af11c75e45d79; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 578f3aba427c938fecfa0d8c83d9acb213a9b24a; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bf9a38803b2626b01cc769aaf13485d8650f576f	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.12.1 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10; 2.6.12; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/1d3abf0c3ddeefc6f6d913aa129acc06fce8240a	patch
https://git.kernel.org/stable/c/d4cceb5184538613572fb79319453f281b1eeacb	patch
https://git.kernel.org/stable/c/2951656b0de00153f2687f3a093890bce72b6215	patch
https://git.kernel.org/stable/c/e9cf4018d74237d142cd66243c821d13593270f0	patch
https://git.kernel.org/stable/c/d9ce2a4b679122397d7f35bad7be46913ad1ca80	patch
https://git.kernel.org/stable/c/987af7625ceb1ee59d70eb0abd7af11c75e45d79	patch
https://git.kernel.org/stable/c/578f3aba427c938fecfa0d8c83d9acb213a9b24a	patch
https://git.kernel.org/stable/c/bf9a38803b2626b01cc769aaf13485d8650f576f	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.