Transport Mismatch Vulnerability in Linux Kernel Affects Multiple Products

CVE-2026-46214

What is CVE-2026-46214?

A vulnerability in the Linux kernel's handling of transport mismatches can cause a permanent increase in the backlog of accepted connections. This occurs when the function vsock_assign_transport() fails, leading to an unhandled state where sk_acceptq_added() is called prematurely. As a result, after a certain number of failures, the listener will reject all new incoming connections. The fix ensures correct sequencing by moving sk_acceptq_added() to occur only after successful transport validation, enhancing the stability and security of networking operations.

References