Data Handling Flaw in Linux Kernel Affecting Non-linear Buffer Copying

CVE-2026-46207

What is CVE-2026-46207?

A vulnerability in the Linux kernel related to vsock and non-linear buffers could lead to uninitialized data being sent to the monitor interface. The issue arises when the virtio_transport_build_skb() function fails to correctly copy payloads from non-linear sk_buffs, resulting in potential data leakage. The fix implements a more robust copying method that handles both linear and non-linear buffers, ensuring that iov_iter is properly initialized and payloads are appropriately copied, which enhances data integrity through improved handling mechanisms.

References