CVE-2026-90142

A flaw was found in the virtionet component of the Linux kernel. When an AFXDP Address Family eXpress Data Path socket is attached, the system fails to properly resize the RX receive ring buffer. This oversight can lead to an out-of-bounds write operation, where data is written beyond the allocat...

CVE-2026-90086

A flaw was found in the Linux kernel's xsk AFXDP subsystem. The zero-copy path incorrectly reads transmit TX metadata even when the XDPTXMETADATA option is not explicitly set. This can lead to the metadata union being overwritten with an unrequested timestamp, potentially causing data integrity...

CVE-2026-90115

A flaw was found in the Linux kernel's AFXDP xsk socket multi-buffer receive path. This vulnerability allows for a NULL pointer dereference in the xskrcv function due to improper handling of buffer allocation failures. An attacker could exploit this flaw to cause a system crash, leading to a Deni...

kernel: igc: set tx buffer type for SMD frames

A flaw was found in the Linux kernel's igc network driver. The igcfpeinitsmdframe function, responsible for initializing transmit TX buffer fields for Stream-based Data SMD frames, does not correctly set the buffer type. This can result in stale XDP eXpress Data Path or XSK AFXDP socket types...

SUSE CVE-2026-90142

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

Linux Distros Unpatched Vulnerability : CVE-2026-90142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the si...

CVE-2026-90142

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

DEBIAN-CVE-2026-90142

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

EUVD-2026-81735

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

CVE-2026-90142

CVE-2026-90142 is an out-of-bounds write vulnerability in the Linux kernel's virtio_net driver. When an AF_XDP socket is attached, the function virtnet_rx_resize fails to resize the rq->xsk_buffs XSK buffer array. If the RX ring size is subsequently increased (e.g., via ethtool -G ), virtnet_r...

CVE-2026-90142 virtio_net: Fix resize of the RX ring

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

CVE-2026-90142 virtio_net: Fix resize of the RX ring

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

CVE-2026-90142: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...

Linux Distros Unpatched Vulnerability : CVE-2026-81002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied...

CVE-2026-81002

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...

AZL-100196 CVE-2026-81002 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...

CVE-2026-81002

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...

UBUNTU-CVE-2026-81002

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...

CVE-2026-81002

CVE-2026-81002 is a critical (CVSS 9.8) memory corruption flaw in the Linux kernel's XDP component. The xdp_convert_zc_to_xdp_frame() function clones an AF_XDP zero-copy packet into an order-0 page but incorrectly advertises PAGE_SIZE as the frame size, allowing the frame to overlap skb_shared_in...

CVE-2026-81002

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdpconvertzctoxdpframe clones an XSK packet into an order-0 page and advertises PAGESIZE as its frame size. It allows the copied frame to occupy the page tail needed by skbsharedinfo and records ze...