https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:30:23 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46214 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vsock/virtio: fix accept queue count leak on transport mismatch</p> <p>virtio_transport_recv_listen() calls sk_acceptq_added() before vsock_assign_transport(). If vsock_assign_transport() fails or selects a different transport, the error path returns without calling sk_acceptq_removed(), permanently incrementing sk_ack_backlog.</p> <p>After approximately backlog+1 such failures, sk_acceptq_is_full() returns true, causing the listener to reject all new connections.</p> <p>Fix by moving sk_acceptq_added() to after the transport validation, matching the pattern used by vmci_transport and hyperv_transport.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vsock/virtio: fix accept queue count leak on transport mismatch</p> <p>virtio_transport_recv_listen() calls sk_acceptq_added() before vsock_assign_transport(). If vsock_assign_transport() fails or selects a different transport, the error path returns without calling sk_acceptq_removed(), permanently incrementing sk_ack_backlog.</p> <p>After approximately backlog+1 such failures, sk_acceptq_is_full() returns true, causing the listener to reject all new connections.</p> <p>Fix by moving sk_acceptq_added() to after the transport validation, matching the pattern used by vmci_transport and hyperv_transport.</p> https://vulnerability.circl.lu/vuln/cve-2026-46214