CVE-2026-90115

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the xsk rcv() function within the multi-buffer path. The issue occurs because xsk buff alloc() is called in a loop without verifying its return value. While xsk buff can alloc() counts fill queue entries, it does not validate their addresses, allowing it to succeed even when xsk buff alloc() rejects all remaining entries and returns NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.