CVE-2026-90138

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vsock implementation where the vsock accept() function incorrectly checks the sk err variable of the listener socket. If a socket triggers a failed self-connect attempt before calling listen(), the sk err variable may be set to EPROTO. Because the listening path does not clear this error, subsequent calls to vsock accept() will reject valid incoming connections due to this stale error. This behavior leads to a resource leak on virtio and hyperv transports, as the child sockets created for these rejected connections are never freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.