OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90142

HIGH · CVSS 7.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's virtio_net component, specifically in the handling of the RX ring when an AF_XDP socket is attached. If the RX ring is resized without properly adjusting the associated XSK buffer array, it can lead to a buffer overflow, potentially allowing for unauthorized memory access or system instability. System administrators and developers using Linux kernel versions impacted by this issue should prioritize applying the fix to mitigate the risk of exploitation.

CVE
CVE-2026-90142
Severity
HIGH
CVSS
7.8
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring When a AF_XDP socket is attached, the virtnet_rx_resize should resize the rq->xsk_buffs XSK buffer array. Otherwise, when the size grows, the virtnet_rx_resume() causes a write past the end of the array. This is easily reproducable with ethtool -G ens3 rx 32 ./xdpsock -i eth0 -q 0 -r -z & ethtool -G eth0 rx 256