CVE-2026-90049 Linux CVE debrief

Who should care

Linux kernel maintainers, users, and network administrators should assess exposure and verify patches. This vulnerability affects Linux kernel configurations, and users should review patch notes and assess exposure. Linux kernel maintainers and users should assess exposure and verify patches to prevent potential ESP packet handling issues.

Why it matters

A vulnerability in the Linux kernel's network stack has been addressed, potentially impacting ESP packet decryption. Linux kernel maintainers and users should assess exposure and verify patches.

• Verify patch levels to prevent potential ESP packet handling issues
• Assess exposure and prioritize patching for Linux kernel configurations

Technical summary

The `skb_zerocopy()` function in the Linux kernel did not properly handle errors, potentially leading to incorrect handling of shared fragments. This could impact the decryption process for ESP packets. The issue arises from the function's failure to properly manage shared fragments when errors occur, which can affect the decryption process for ESP packets. Linux kernel maintainers and users should assess exposure and verify patches. The vulnerability has been addressed, and Linux kernel maintainers, users, and network administrators should assess exposure and verify patches.

Defensive priority

Linux kernel maintainers and users should assess exposure and verify patches.

Recommended defensive actions

• Review Linux kernel patch notes and assess exposure
• Verify system configurations and patch levels
• Monitor network traffic for unusual ESP packet handling
• Assess exposure and prioritize patching for Linux kernel configurations
• Verify patch levels to prevent potential ESP packet handling issues
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. Multiple source references from the Linux kernel Git repository are available. The issue is related to the `skb_zerocopy()` function in the Linux kernel, which did not properly handle errors. This vulnerability has been addressed, and Linux kernel maintainers, users, and network administrators should assess exposure and verify patches. The CVE record and NVD entry provide details on the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.