CVE-2026-90059

CVE-2026-90059 is a Linux kernel vulnerability in the stmmac network driver. When the RX path was converted to zero-copy, NET_IP_ALIGN was not carried over into stmmac_rx_offset(), leaving IP headers misaligned on architectures where it is 2 (e.g., ARM32 ). Any received ICMP echo request triggers...

CVE-2026-90059 net: stmmac: restore NET_IP_ALIGN in the RX DMA offset

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: restore NETIPALIGN in the RX DMA offset Since the RX path was converted to zero-copy, the page pool page is handed to the stack directly as the skb head, and the offset the DMA engine writes at is what determines the...