PT-2026-44337 · Linux · Linux

Published 2026-05-28 · Updated 2026-05-28 · CVE-2026-46214

NVD

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix accept queue count leak on transport mismatch

virtio transport recv listen() calls sk acceptq added() before vsock assign transport(). If vsock assign transport() fails or selects a different transport, the error path returns without calling sk acceptq removed(), permanently incrementing sk ack backlog.

After approximately backlog+1 such failures, sk acceptq is full() returns true, causing the listener to reject all new connections.

Fix by moving sk acceptq added() to after the transport validation, matching the pattern used by vmci transport and hyperv transport.

Related Identifiers

CVE-2026-46214

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46214 · Security Note
• https://git.kernel.org/stable/c/6d3275fc4ed968938e1d556c344798046776668d · Note
• https://git.kernel.org/stable/c/29371f3cc83e2a92265b4768014a30b80234112f · Note
• https://git.kernel.org/stable/c/e9edf9893cf26d060705c910a9b62d8cc96ed56a · Note
• https://git.kernel.org/stable/c/52bcb57a4e8a0865a76c587c2451906342ae1b2d · Note
• https://git.kernel.org/stable/c/65c484726e74013a2ec7ba67a34d87760ae8f390 · Note