What is CVE-2026-49424?

CVE-2026-49424 is a unscored severity Linux kernel vulnerability. CVE-2026-49424 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-49424?

CVE-2026-49424 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-49424?

Monitor the NIST NVD and your Linux distribution's security advisories for CVE-2026-49424 patch availability.

Is CVE-2026-49424 actively exploited?

CVE-2026-49424 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-49424

The Linux waitid() implementation translates a FreeBSD siginfo_t struct into a stack-declared Linux siginfo_t. It did not first zero the stack struct. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information.

Package Linux Kernel

Published 2026-08-19

Last modified 2026-08-19

Patch available

Awaiting data