Linux Kernel Vulnerability in skb_zerocopy Functionality, Impacting Open vSwitch

CVE-2026-90049

What is CVE-2026-90049?

In the Linux kernel, a vulnerability exists within the skb_zerocopy function, which is designed to copy fragment data from one socket buffer (skb) to another. An issue arises during error handling operations when skb_tx_error is incorrectly applied to the source skb. This results in unintended modifications to the source skb, impacting its management within the network stack. The problem particularly affects Open vSwitch, where the error reporting and buffer management can lead to improper handling of fragmented packets and potential data leakage. Ensuring that error handling is properly isolated and the management of skb integrity is vital to maintaining network stability and security.

References