CVE-2026-90069

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto acomp component where ACOMP REQUEST ON STACK() reserves insufficient storage for asynchronous fallbacks. When an async implementation is selected, the acomp request clone() function copies only the stack-sized object, leaving the clone without storage for the async provider request context. This leads to a slab out-of-bounds (OOB) write when providers, such as QAT, write through acomp request ctx(). KASAN (Kernel Address Sanitizer) reports this as a slab OOB write.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.