# CVE-2026-90235

Linux kernel sunrpc race may cause kernel memory corruption, potential kernel compromise or DoS.

- Page: https://www.vulneraibility.com/cve/CVE-2026-90235
- CVSS: 9.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.66% (percentile 51.8)
- Published: 2026-09-17

## Affected versions

- Linux: affected >= a246b0105bbd9a70a698f69baae2042996f2a0e9 and < ed80d009b154aa204f541d390884851b3d4f15ae; >= a246b0105bbd9a70a698f69baae2042996f2a0e9 and < 589f761236e05ff9de1bdfd6a5258f113e6457fe; >= a246b0105bbd9a70a698f69baae2042996f2a0e9 and < da652cb17f9faeea1fa44b7215e8869a0b10b664; >= a246b0105bbd9a70a698f69baae2042996f2a0e9 and < d8f0b83753809761a560c4b33249388548ba6e43; >= a246b0105bbd9a70a698f69baae2042996f2a0e9 and < 33930840b5f0a79f826e7c69dc6cd78f72a67481; 2.6.15; fixed in < 2.6.15, >= 6.6.157 and <= 6.6.*, >= 6.12.110 and <= 6.12.*, >= 6.18.52 and <= 6.18.*, >= 7.2.6 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Race condition in sunrpc xprtsock can invoke stale kernel callbacks via AF_LOCAL/UDP/TCP sockets, causing kernel memory corruption, possible DoS or remote/local kernel code execution.

## Action

Immediate action required

## Recommendation

Apply vendor/stable kernel updates or upstream patch immediately.

## References

- [other] https://git.kernel.org/stable/c/6b79b5a0f1c566f0aa6e08c7981826015a0acc4d
- [other] https://git.kernel.org/stable/c/ed80d009b154aa204f541d390884851b3d4f15ae
- [other] https://git.kernel.org/stable/c/589f761236e05ff9de1bdfd6a5258f113e6457fe
- [other] https://git.kernel.org/stable/c/da652cb17f9faeea1fa44b7215e8869a0b10b664
- [other] https://git.kernel.org/stable/c/d8f0b83753809761a560c4b33249388548ba6e43
- [other] https://git.kernel.org/stable/c/33930840b5f0a79f826e7c69dc6cd78f72a67481

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.