CVE-2026-96206 Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information…

Description

Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.

Affected products and versions

Product	Affected versions	Fixed in
Windows Subsystem for Linux (WSL2) 3.0	earliest → < 3.0.1	3.0.1

Other CVEs of Windows Subsystem for Linux (WSL2)

The 8 CVEs of Windows Subsystem for Linux (WSL2) →

CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized… 7.8 High CVE-2026-85879 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to… 7.0 High CVE-2026-57973 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to… 6.3 Medium CVE-2026-57968 Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally 7.8 High