DEBIAN-CVE-2026-90327

In the Linux kernel, the following vulnerability has been resolved: phonet: pep: do not write beyond optlen in getsockopt pepgetsockopt clamps the reported length to the caller's buffer with mint, but then stores the value with putuserval, int user optval, which always writes sizeofint bytes. A...

CVE-2026-90327

CVE-2026-90327 is a memory out-of-bounds write in the Linux kernel's phonet: pep subsystem. The vulnerable function pep_getsockopt() clamps the reported length to the caller's buffer using min_t(), but then stores the value via put_user(), which unconditionally writes sizeof(int) bytes. When a ge...

EUVD-2026-81988

In the Linux kernel, the following vulnerability has been resolved: phonet: pep: do not write beyond optlen in getsockopt pepgetsockopt clamps the reported length to the caller's buffer with mint, but then stores the value with putuserval, int user optval, which always writes sizeofint bytes. A...