Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46234

In the Linux kernel, the following vulnerability has been resolved: vsock: fix buffer size clamping order In vsock_update_buffer_size(), the buffer size was being clamped to the maximum first, and then to the minimum. If a user sets a minimum buffer size larger than the maximum, the minimum check overrides the maximum check, inverting the constraint. This breaks the intended socket memory boundaries by allowing the vsk->buffer_size to grow beyond the configured vsk->buffer_max_size. Fix this
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a7143c2ec1cf5337ef5999e34f7b92fcad8afd8223f510d570906826a0bdc59e
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/vmw_vsock/af_vsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessTh…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/vmw_vsock/af_vsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f6ec135941d2c1c2dbb87b5ce1783f4f6ac6ccca","status":"affected","version":"b9f2b0ffde0c9b666b2b1672eb468b8f805a9b97","versionType":"git"},{"lessThan":"caf11dfea5233a69298a1c448bbf8d1639c80536","status":"affected","version":"b9f2b0ffde0c9b666b2b1672eb468b8f805a9b97","versionType":"git"},{"lessThan":"01ef69785dc3162f588a361ab770b1e312800188","status":"affected","version":"b9f2b0ffde0c9b666b2b1…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/vmw_vsock/af_vsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessTh…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/vmw_vsock/af_vsock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f6ec135941d2c1c2dbb87b5ce1783f4f6ac6ccca","status":"affected","version":"b9f2b0ffde0c9b666b2b1672eb468b8f805a9b97","versionType":"git"},{"lessThan":"caf11dfea5233a69298a1c448bbf8d1639c80536","status":"affected","version":"b9f2b0ffde0c9b666b2b1672eb468b8f805a9b97","versionType":"git"},{"lessThan":"01ef69785dc3162f588a361ab770b1e312800188","status":"affected","version":"b9f2b0ffde0c9b666b2b1…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/01ef69785dc3162f588a361ab770b1e312800188"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/0b68881501460c3761f196469e1e503218c5e536"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/2602f7bb5818e92315feeaeb71d8ce4d5c9ab160"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/310da27932dd0afe7ce7456dfe1f0814c3301f41"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a998a7e250bf976539e05a00ec64a81292afecaa"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/caf11dfea5233a69298a1c448bbf8d1639c80536"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/d114bfdc9b76bf93b881e195b7ec957c14227bab"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/f6ec135941d2c1c2dbb87b5ce1783f4f6ac6ccca"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:48585ff31e65e144d83e9f213142c286ae3238605c7061eda7181d95a3efc01f · sha256:3e30b9133e2a5388… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer