01 Record

CVE-2026-90327

phonet: pep: do not write beyond optlen in getsockopt

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

phonet: pep: do not write beyond optlen in getsockopt

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.9% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-17 16:08Z1 MO AGO

Last updated

2026-10-19 09:01Z10 DAYS AGO

Reserved

2026-09-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

e93a622ab9b5c5b1f9f41441447a5b6ec1ac645863401d9161aee02d7ec52f52

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < 6054fed6bad08b6d03973e8ffca7f0c9394d1c30, 02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < eac733a0b6fe0a52d91f9f623425735ed50ac6c2, 02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < 95e0ed2439dd1792eb454c68ae8d10f30ffe3bff, 02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < 056eea1a2068ad2fb7c3093c5f1095268f87d0c7, 02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < 1bf499e438da80455e258049bce60ffb3a53f3fa, 02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < c4487e4d5309de587479ecc2f5173b49586f46f4, 02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < f97022fefe6eb06ee18549d603420440f2959802, 02a47617cdce440f60c71a51f3a93f9f5fcc5a7a to < 77e5eb0e192aec6710c03ca8144582fd2af36ca4, 2.6.28—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6054fed6bad08b6d03973e8ffca7f0c9394d1c30
git.kernel.orghttps://git.kernel.org/stable/c/eac733a0b6fe0a52d91f9f623425735ed50ac6c2
git.kernel.orghttps://git.kernel.org/stable/c/95e0ed2439dd1792eb454c68ae8d10f30ffe3bff
git.kernel.orghttps://git.kernel.org/stable/c/056eea1a2068ad2fb7c3093c5f1095268f87d0c7
git.kernel.orghttps://git.kernel.org/stable/c/1bf499e438da80455e258049bce60ffb3a53f3fa
git.kernel.orghttps://git.kernel.org/stable/c/c4487e4d5309de587479ecc2f5173b49586f46f4
git.kernel.orghttps://git.kernel.org/stable/c/f97022fefe6eb06ee18549d603420440f2959802
git.kernel.orghttps://git.kernel.org/stable/c/77e5eb0e192aec6710c03ca8144582fd2af36ca4

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.