PT-2026-94505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cgroup getsockopt BPF program where the ctx-optlen can be shrunk after the kernel getsockopt handler has executed. In the kernel-buffer variant used by TCP ZEROCOP...

CVE-2026-90157: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt hook A cgroup getsockopt BPF program can shrink ctx-optlen after the kernel getsockopt handler has run. The kernel-buffer variant, used by TCPZEROCOPYRECEIVE, only rejects values...