https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:12:44 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46234 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vsock: fix buffer size clamping order</p> <p>In vsock_update_buffer_size(), the buffer size was being clamped to the maximum first, and then to the minimum. If a user sets a minimum buffer size larger than the maximum, the minimum check overrides the maximum check, inverting the constraint.</p> <p>This breaks the intended socket memory boundaries by allowing the vsk-&gt;buffer_size to grow beyond the configured vsk-&gt;buffer_max_size.</p> <p>Fix this by checking the minimum first, and then the maximum. This ensures the buffer size never exceeds the buffer_max_size.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vsock: fix buffer size clamping order</p> <p>In vsock_update_buffer_size(), the buffer size was being clamped to the maximum first, and then to the minimum. If a user sets a minimum buffer size larger than the maximum, the minimum check overrides the maximum check, inverting the constraint.</p> <p>This breaks the intended socket memory boundaries by allowing the vsk-&gt;buffer_size to grow beyond the configured vsk-&gt;buffer_max_size.</p> <p>Fix this by checking the minimum first, and then the maximum. This ensures the buffer size never exceeds the buffer_max_size.</p> https://vulnerability.circl.lu/vuln/cve-2026-46234