---
title: "CVE-2026-90049: Linux Kernel - Data Corruption & Denial of Service"
description: "Linux kernel contains a vulnerability in skb_zerocopy() where skb_tx_error() is incorrectly called on the source skb, causing destructive operations and improper buffer ownership handling, letting attackers cause data corruption or denial of service, exploit requires crafted packet triggering skb_orphan_frags() failure."
url: https://panop.io/threat-heartbeat/CVE-2026-90049/
---

# CVE-2026-90049 Linux Kernel - Data Corruption & Denial of Service

Linux kernel contains a vulnerability in skb\_zerocopy() where skb\_tx\_error() is incorrectly called on the source skb, causing destructive operations and improper buffer ownership handling, letting attackers cause data corruption or denial of service, exploit requires crafted packet triggering skb\_orphan\_frags() failure.

CVSS base score 9.3 /10

Critical

CISA KEV

Not listed

Public exploit

None known

Authentication

Not required

EPSS

0.17% chance of exploitation in 30 days

[View the NVD record ↗](https://nvd.nist.gov/vuln/detail/CVE-2026-90049)

## Details

Type

Data Corruption

Impact

Denial Of Service, Data Tampering

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Published

16 September 2026

Updated

15 October 2026

## Vendor fix

Update to the latest Linux kernel version containing the fix for skb\_zerocopy()

Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.

## References

- [https://nvd.nist.gov/vuln/detail/CVE-2026-90049](https://nvd.nist.gov/vuln/detail/CVE-2026-90049)
- [https://git.kernel.org/stable/c/8ece906150128d5ec2462aabcc978c568433eca4](https://git.kernel.org/stable/c/8ece906150128d5ec2462aabcc978c568433eca4)
- [https://git.kernel.org/stable/c/a13b1e80e5015cd732440b475c0ef443dc4a2157](https://git.kernel.org/stable/c/a13b1e80e5015cd732440b475c0ef443dc4a2157)
- [https://git.kernel.org/stable/c/bab5a851e44a3601d31f2aa8043f385bb50ac5d9](https://git.kernel.org/stable/c/bab5a851e44a3601d31f2aa8043f385bb50ac5d9)
- [https://git.kernel.org/stable/c/fb10e0e9b220a2eed08931a60dbaad9a2370c908](https://git.kernel.org/stable/c/fb10e0e9b220a2eed08931a60dbaad9a2370c908)
- [https://git.kernel.org/stable/c/04dd250a78e268af3e7124beb1dc10ec1dd88d60](https://git.kernel.org/stable/c/04dd250a78e268af3e7124beb1dc10ec1dd88d60)
- [https://git.kernel.org/stable/c/767ec2a65cc022d303b0c9c12811e7db22057341](https://git.kernel.org/stable/c/767ec2a65cc022d303b0c9c12811e7db22057341)
- [https://git.kernel.org/stable/c/8069643ae64dfdf634b6c78c7f622e5323031436](https://git.kernel.org/stable/c/8069643ae64dfdf634b6c78c7f622e5323031436)
- [https://git.kernel.org/stable/c/849bdb83123760a865bcb2970127f4c0b9423ba3](https://git.kernel.org/stable/c/849bdb83123760a865bcb2970127f4c0b9423ba3)

[← All CVEs](https://panop.io/threat-heartbeat/)

## What this record can't tell you

- Whether you run the affected software, and where
- Whether an attacker can actually reach and exploit it
- The misconfigurations that never get a CVE number
- What it would cost the business, ranked into what to fix first

Panop answers these inside your environment, for this CVE and every other finding.

[Book a demo](https://panop.io/demo)