{"id":"AZL-102635","summary":"CVE-2026-90327 affecting package kernel 6.6.150.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nphonet: pep: do not write beyond optlen in getsockopt\n\npep_getsockopt() clamps the reported length to the caller's buffer with\nmin_t(), but then stores the value with put_user(val, (int __user *)\noptval), which always writes sizeof(int) bytes. A getsockopt() call with\nan optlen smaller than sizeof(int) thus reports the clamped length yet\nwrites a full int, one to three bytes past the user buffer.\n\nWrite the value with copy_to_user() bounded by len, so at most optlen\nbytes are copied, matching the length reported back to userspace.","modified":"2026-09-18T14:18:02.852119289Z","published":"2026-09-17T17:17:30Z","upstream":["CVE-2026-90327"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90327"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.150.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-102635.json"}}],"schema_version":"1.9.0"}