{"cve":"CVE-2026-90327","nvd":{"published":"2026-09-17T17:17:30.800","modified":"2026-10-19T09:19:26.783","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nphonet: pep: do not write beyond optlen in getsockopt\n\npep_getsockopt() clamps the reported length to the caller's buffer with\nmin_t(), but then stores the value with put_user(val, (int __user *)\noptval), which always writes sizeof(int) bytes. A getsockopt() call with\nan optlen smaller than sizeof(int) thus reports the clamped length yet\nwrites a full int, one to three bytes past the user buffer.\n\nWrite the value with copy_to_user() bounded by len, so at most optlen\nbytes are copied, matching the length reported back to userspace.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/056eea1a2068ad2fb7c3093c5f1095268f87d0c7","https://git.kernel.org/stable/c/1bf499e438da80455e258049bce60ffb3a53f3fa","https://git.kernel.org/stable/c/6054fed6bad08b6d03973e8ffca7f0c9394d1c30","https://git.kernel.org/stable/c/77e5eb0e192aec6710c03ca8144582fd2af36ca4","https://git.kernel.org/stable/c/95e0ed2439dd1792eb454c68ae8d10f30ffe3bff"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:55:23.253742848+00:00"},"epss":{"cve":"CVE-2026-90327","score":0.00216,"percentile":0.11957,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}