CVE-2026-90138

CVE-2026-90138 affects the Linux kernel vsock (virtual socket) subsystem . The root cause is that vsock_accept() incorrectly checks the listener socket's sk_err field, which may retain a stale EPROTO error set during a prior failed self-connect while the socket was in TCP_SYN_SENT state. This cau...

EUVD-2026-81731

In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's skerr in vsockaccept Syzbot reported an issue which can be reproduced with these steps: r0 = socketAFVSOCK, SOCKSTREAM, 0 bindr0, VMADDRCIDANY, PORT connectr0, VMADDRCIDLOCAL, PORT - -1, EPROTO...