Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-90115

xsk: fix NULL pointer dereference in __xsk_rcv()

No CVSS scoreEPSS 0.0021 · 10th percentile

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:06 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 804627751b4281dd95148e7564759145da67855e to before aaebce297efc3e3dccb98a6ff838cfaa47db08db git
  • affected 804627751b4281dd95148e7564759145da67855e to before 60d7d3559ce66e227e195e9463cdfed8077c8659 git
  • affected 804627751b4281dd95148e7564759145da67855e to before 214fb79b0379cb0214905632a2537c0c33f594eb git
  • affected 804627751b4281dd95148e7564759145da67855e to before 8341bd3ff126d85bc8c4ed52eedcaa5b1a65f194 git
  • affected 804627751b4281dd95148e7564759145da67855e to before e37b2abca80473e106176e41712a369fd2f72117 git
Other versions: unaffected
Linux Linux
  • affected 6.6
  • unaffected before 6.6 semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.52 to 6.18.*, inclusive semver
  • unaffected 7.2.6 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-90115
CNA
Linux
Tags
Published
17 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0021, the 10th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.