Incorrect calculation in Linux kernel - CVE-2026-90054

Vulnerability identifier: #VU151434

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-90054

CWE-ID: CWE-682

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to corrupt TCP stream data.

The vulnerability exists due to incorrect calculation of the retransmission length in the TCP retransmission path when retransmitting TCP urgent data across multiple segments. A remote attacker can send TCP urgent data that is retransmitted across multiple segments to corrupt TCP stream data.

Linux kernel
Debian Linux
Ubuntu
linux (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-oracle (Ubuntu package)
linux-lowlatency (Ubuntu package)
linux-gke (Ubuntu package)
linux-aws-5.15 (Ubuntu package)
linux-lowlatency-hwe-5.15 (Ubuntu package)
linux-hwe-5.15 (Ubuntu package)
linux-fips (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux-nvidia-tegra (Ubuntu package)
linux-ibm-5.15 (Ubuntu package)
linux-azure-fde-5.15 (Ubuntu package)
linux-intel-iotg (Ubuntu package)
linux-realtime (Ubuntu package)
linux-gkeop (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-nvidia-tegra-igx (Ubuntu package)
linux-ibm (Ubuntu package)
linux-intel-iotg-5.15 (Ubuntu package)
linux-oracle-5.15 (Ubuntu package)
linux-gcp-5.15 (Ubuntu package)
linux-nvidia-tegra-5.15 (Ubuntu package)
linux-azure-fde (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-gcp-fips (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux (Debian package)

Install security update from vendor's repository.

linux (Ubuntu package) - addressed in versions 5.15.0-202.212, 7.0.0-42.42
linux-kvm (Ubuntu package) - update to 5.15.0-1111.116
linux-aws (Ubuntu package) - addressed in versions 5.15.0-1119.126, 7.0.0-1016.17
linux-gcp (Ubuntu package) - addressed in versions 5.15.0-1120.130, 7.0.0-1016.18
linux-azure (Ubuntu package) - update to 5.15.0-1125.134
linux-oracle (Ubuntu package) - addressed in versions 5.15.0-1116.122, 7.0.0-1015.16
linux-lowlatency (Ubuntu package) - update to 5.15.0-197.207
linux-gke (Ubuntu package) - update to 5.15.0-1115.121
linux-aws-5.15 (Ubuntu package) - update to 5.15.0-1119.126~20.04.1
linux-lowlatency-hwe-5.15 (Ubuntu package) - update to 5.15.0-197.207~20.04.1
linux-hwe-5.15 (Ubuntu package) - update to 5.15.0-202.212~20.04.1
linux-fips (Ubuntu package) - update to 5.15.0-202.212+fips1
linux-azure-5.15 (Ubuntu package) - update to 5.15.0-1125.134~20.04.1
linux-nvidia-tegra (Ubuntu package) - update to 5.15.0-1070.72
linux-ibm-5.15 (Ubuntu package) - update to 5.15.0-1113.117~20.04.1
linux-azure-fde-5.15 (Ubuntu package) - update to 5.15.0-1124.133~20.04.1
linux-intel-iotg (Ubuntu package) - update to 5.15.0-1114.120
linux-realtime (Ubuntu package) - update to 5.15.0-1118.127
linux-gkeop (Ubuntu package) - update to 5.15.0-1102.110
linux-nvidia (Ubuntu package) - update to 5.15.0-1114.115
linux-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0-1059.59
linux-ibm (Ubuntu package) - addressed in versions 5.15.0-1113.117, 7.0.0-1017.17
linux-intel-iotg-5.15 (Ubuntu package) - update to 5.15.0-1114.120~20.04.1
linux-oracle-5.15 (Ubuntu package) - update to 5.15.0-1116.122~20.04.1
linux-gcp-5.15 (Ubuntu package) - update to 5.15.0-1120.130~20.04.1
linux-nvidia-tegra-5.15 (Ubuntu package) - update to 5.15.0-1070.72~20.04.1
linux-azure-fde (Ubuntu package) - update to 5.15.0-1124.133
linux-intel-iot-realtime (Ubuntu package) - update to 5.15.0-1111.115
linux-gcp-fips (Ubuntu package) - update to 5.15.0-1120.130+fips1
linux-aws-fips (Ubuntu package) - update to 5.15.0-1119.126+fips1
linux-azure-fips (Ubuntu package) - update to 5.15.0-1125.134+fips1
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17
linux (Debian package) - update to 6.12.111-1

• https://git.kernel.org/stable/c/3d4e005c198dc410ad568f832bffa7569c059ff8
• https://git.kernel.org/stable/c/47eb90299e6882d6445672530dd7c51ac33ebdbd
• https://git.kernel.org/stable/c/4fd2ee4ac154c204d95d8db72221446dac5af9b8
• https://git.kernel.org/stable/c/711bfd762bec05fb19bc3b17cbb157c39f4e66da
• https://git.kernel.org/stable/c/8eb51013b6308870479a64b4a2a018697b997849
• https://git.kernel.org/stable/c/b8f08a94b2a4addc39249dcf9c792e786108621b
• https://git.kernel.org/stable/c/ce2b807f42ed5e55567b8864ab72963f90779270
• https://git.kernel.org/stable/c/ebe55406404f3cb28e36d2b668e2c6c05026ec29

• Incorrect calculation in Linux kernel ipv4
• Debian update for linux
• Ubuntu update for linux-azure-fde
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more
• Ubuntu update for linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx
• Ubuntu update for linux, linux-aws, linux-aws-5.15 and more