CVE-2026-46234

HIGH EPSS 2.9%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size(), the buffer size was being clamped to the maximum first, and then to the minimum. If a user sets a minimum buffer size larger than the maximum, the minimum check overrides the maximum check, inverting the constraint. This breaks the intended socket memory boundaries by allowing the vsk->buffer_size to grow beyond the configured vsk->buffer_max_size. Fix this by checking the minimum first, and then the maximum. This ensures the buffer size never exceeds the buffer_max_size.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
2.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥5.5  –  <5.10.258
linuxlinux_kernel*≥5.11  –  <5.15.209
linuxlinux_kernel*≥5.16  –  <6.1.175
linuxlinux_kernel*≥6.2  –  <6.6.140
linuxlinux_kernel*≥6.7  –  <6.12.90
linuxlinux_kernel*≥6.13  –  <6.18.32
linuxlinux_kernel*≥6.19  –  <7.0.9

References 8

  • git.kernel.org https://git.kernel.org/stable/c/01ef69785dc3162f588a361ab770b1e312800188
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0b68881501460c3761f196469e1e503218c5e536
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2602f7bb5818e92315feeaeb71d8ce4d5c9ab160
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/310da27932dd0afe7ce7456dfe1f0814c3301f41
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a998a7e250bf976539e05a00ec64a81292afecaa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/caf11dfea5233a69298a1c448bbf8d1639c80536
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d114bfdc9b76bf93b881e195b7ec957c14227bab
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f6ec135941d2c1c2dbb87b5ce1783f4f6ac6ccca
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/01ef69785dc3162f588a361ab770b1e312800188
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0b68881501460c3761f196469e1e503218c5e536
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2602f7bb5818e92315feeaeb71d8ce4d5c9ab160
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/310da27932dd0afe7ce7456dfe1f0814c3301f41
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a998a7e250bf976539e05a00ec64a81292afecaa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/caf11dfea5233a69298a1c448bbf8d1639c80536
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d114bfdc9b76bf93b881e195b7ec957c14227bab
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f6ec135941d2c1c2dbb87b5ce1783f4f6ac6ccca
    Patch