CVE-2026-90051

CVE-2026-90051 affects the Linux kernel's TCP devmem (device memory) TX path . When NETIF_F_SG is absent, devmem TCP TX was not rejected even though it requires zero-copy; tcp_sendmsg_locked() would take the copy path and attempt to read from a dma-buf iovec, breaking invariants assumed by commit...