CVE-2026-46214

Source
https://cve.org/CVERecord?id=CVE-2026-46214
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46214.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-46214
Downstream
Related
Published
2026-05-28T09:40:31.245Z
Modified
2026-06-05T18:29:32.532571553Z
Summary
vsock/virtio: fix accept queue count leak on transport mismatch
Details

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: fix accept queue count leak on transport mismatch

virtiotransportrecvlisten() calls skacceptqadded() before vsockassigntransport(). If vsockassigntransport() fails or selects a different transport, the error path returns without calling skacceptqremoved(), permanently incrementing skack_backlog.

After approximately backlog+1 such failures, skacceptqis_full() returns true, causing the listener to reject all new connections.

Fix by moving skacceptqadded() to after the transport validation, matching the pattern used by vmcitransport and hypervtransport.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46214.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c0cfa2d8a788fcf45df5bf4070ab2474c88d543a
Fixed
2ea5d2c79edcc99c7dbe0bb7518f5e1ee2a2391f
Fixed
fd51e810affa38d735d04261e673b2a5fe9c8665
Fixed
f66c7904fb6f0e420a654bc90909e64a25d00896
Fixed
65c484726e74013a2ec7ba67a34d87760ae8f390
Fixed
29371f3cc83e2a92265b4768014a30b80234112f
Fixed
e9edf9893cf26d060705c910a9b62d8cc96ed56a
Fixed
6d3275fc4ed968938e1d556c344798046776668d
Fixed
52bcb57a4e8a0865a76c587c2451906342ae1b2d

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46214.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.258
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.209
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.175
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.140
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.90
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.32
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-46214.json"