PT-2026-52228 · Linux · Linux

Published

2026-06-25

Updated

2026-06-25

CVE-2026-53132

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix potential unbounded skb queue

virtio transport inc rx pkt() checks vvs->rx bytes + len > vvs->buf alloc.

virtio transport recv enqueue() skips coalescing for packets with VIRTIO VSOCK SEQ EOM.

If fed with packets with len == 0 and VIRTIO VSOCK SEQ EOM, a very large number of packets can be queued because vvs->rx bytes stays at 0.

Fix this by estimating the skb metadata size:

(Number of skbs in the queue) * SKB TRUESIZE(0)

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-53132

Linux