CVE-2026-90145

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hinic3 send one skb() function where the socket buffer (skb) fragment count is cached before calling hinic3 tx offload(). When hinic3 tx csum() utilizes skb checksum help() for unsupported tunnel packets, the skb may undergo linearization. Using a stale fragment count to build the TX descriptor results in a descriptor mismatch, potentially leading to IOMMU faults or out-of-bounds DMA reads. Additionally, the failure to handle the return value of skb checksum help() allows the transmission of corrupted packets with incomplete checksums.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.