PT-2026-44337 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-07-08 · CVE-2026-46214

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resource leak occurs in the vsock/virtio component of the Linux kernel due to a transport mismatch. The function virtio transport recv listen() invokes sk acceptq added() before vsock assign transport(). If vsock assign transport() fails or selects an alternative transport, the error path returns without calling sk acceptq removed(), which leads to a permanent increment of the sk ack backlog variable. Once the number of failures exceeds the backlog limit, sk acceptq is full() returns true, causing the listener to reject all subsequent new connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-46214

ECHO-6F74-6D45-61B7

OESA-2026-2580

OPENSUSE-SU-2026:10954-1

SUSE-SU-2026:22521-1

SUSE-SU-2026:22522-1

SUSE-SU-2026:2799-1

SUSE-SU-2026:2800-1

Affected Products

Linux Kernel

References · 688

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46214.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-46052 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:22521-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43033 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2580 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43466 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31588 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46151 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43328 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31466 · Security Note
• https://git.kernel.org/stable/c/fd51e810affa38d735d04261e673b2a5fe9c8665 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-39864 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:2799-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:22522-1 · Vendor Advisory