Buffer Size Mismanagement in Linux Kernel vsock Component

CVE-2026-46234

What is CVE-2026-46234?

A vulnerability in the Linux kernel's vsock implementation allowed buffer sizes to be improperly clamped. Specifically, the ordering of minimum and maximum buffer size checks was incorrect. This flaw permitted user-defined minimum buffer sizes to override maximum boundary conditions, thereby allowing the buffer size to exceed specified limits. The fix implemented corrects the validation order, ensuring that the minimum size is evaluated before the maximum, thus maintaining intended memory constraints and preventing oversized buffer allocations.

References