CVE-2026-53132vsock/virtio: fix potential unbounded skb queue
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unbounded skb queue virtio_transport_inc_rx_pkt() checks vvs->rx_bytes + len > vvs->buf_alloc. virtio_transport_recv_enqueue() skips coalescing for packets with VIRTIO_VSOCK_SEQ_EOM. If fed with packets with len == 0 and VIRTIO_VSOCK_SEQ_EOM, a very large number of packets can be queued because vvs->rx_bytes stays at 0. Fix this by estimating the skb metadata size: (Number of skbs in the queue) * SKB_TRUESIZE(0)
- CVSS
- 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 077706165717686a2a6a71405fef036cd5b37ae0 builds before 1eca304f97a34ed5e921e1f0e06c8b241f25bf12; 077706165717686a2a6a71405fef036cd5b37ae0 builds before 9bdc637fde66b63d6cad0caacd034888bb7bf5f5; 077706165717686a2a6a71405fef036cd5b37ae0 builds before 100d5b2ffdc6468b9e48532641f29e83efdcb63c; 077706165717686a2a6a71405fef036cd5b37ae0 builds before 059b7dbd20a6f0c539a45ddff1573cb8946685b5; 5852a2b573f7a3a29df46296e56aa3491e589cdf; from 6.1.63 before 6.2 | CNA record |
linux linux_kernel linux:linux_kernel | from 6.1.63 before 6.2; from 6.3.1 before 6.12.94; from 6.13 before 6.18.36; from 6.19 before 7.0.13; 6.3; 6.3; 6.3; 6.3; and 4 more ranges | NVD |
References
- https://git.kernel.org/stable/c/1eca304f97a34ed5e921e1f0e06c8b241f25bf12patch
- https://git.kernel.org/stable/c/9bdc637fde66b63d6cad0caacd034888bb7bf5f5patch
- https://git.kernel.org/stable/c/100d5b2ffdc6468b9e48532641f29e83efdcb63cpatch
- https://git.kernel.org/stable/c/059b7dbd20a6f0c539a45ddff1573cb8946685b5patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.