CVE-2026-90226

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the nfc llcp getsockopt() function where the kernel always stores 4 bytes when using put user(), regardless of the optlen provided by the caller. Because the existing length clamping only affects the value reported back to userspace and does not constrain the actual memory store, providing an optlen value less than 4 results in a write operation that exceeds the user buffer. This behavior affects all five supported optnames within the getsockopt(2) contract.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.