CVE-2026-90327

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the pep getsockopt() function where the system fails to properly bound the amount of data written to the user buffer. While the function uses min t() to clamp the reported length, it subsequently uses put user() to store the value, which always writes a full int (typically 4 bytes). If a getsockopt() call is made with an optlen smaller than the size of an integer, the system writes one to three bytes beyond the allocated user buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.