CVE-2026-90157

CVE-2026-90157 affects the Linux kernel BPF cgroup getsockopt hook. A cgroup getsockopt BPF program can shrink ctx->optlen after the kernel getsockopt handler runs. The kernel-buffer variant (used by TCP_ZEROCOPY_RECEIVE ) only rejects values larger than the original length, so a negative optl...