CVE-2026-90086

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the zero-copy path of the xsk module where TX metadata is read whenever the UMEM has metadata space, regardless of whether the descriptor sets XDP TX METADATA. Additionally, for mlx5 MPWQEs, metadata on descriptors joining an open session is not validated and fails to configure requested offloads. In these cases, a non-NULL metadata pointer is incorrectly treated as a timestamp completion request even if XDP TXMD FLAGS TIMESTAMP is not set, potentially leading to the metadata union being overwritten with an unrequested timestamp. The xsk tx metadata request() function is only executed for the descriptor that starts a session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.