PT-2026-44330 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-10 · CVE-2026-46207

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vsock/virtio component where non-linear skbs (socket buffers) result in an empty payload in the tap skb. The virtio transport build skb() function utilizes virtio transport copy nonlinear skb() to copy the original payload to the vsockmon tap device. However, the iov iter is manually initialized without setting iov iter.count. Because the iov iter is zero-initialized, the copy length remains zero, causing no payload to be copied to the monitor interface and leaving data uninitialized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-46207

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 292

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46207.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46207 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46207 · Security Note
• https://osv.dev/vulnerability/CVE-2026-46207 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-46207 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46207 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46207 · Vendor Advisory
• https://git.kernel.org/stable/c/52da6a74ca3de0fcda60301096b71534b3b18641 · Patch
• https://git.kernel.org/stable/c/06747f52ab157591cec7e5623a759473b66ef6f6 · Patch
• https://git.kernel.org/stable/c/3a3e3d90cbc79600544536723911657730759af3 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46207 · Vendor Advisory
• https://git.kernel.org/stable/c/378b131a25bd1a5ee27ca199fe486c299d5350c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-46207 · Security Note
• https://suse.com/security/cve/CVE-2026-46166 · Note