CVE-2026-46214: vsock/virtio: fix accept queue count leak on transport mismatch
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: fix accept queue count leak on transport mismatch
virtiotransportrecvlisten() calls skacceptqadded() before vsockassigntransport(). If vsockassigntransport() fails or selects a different transport, the error path returns without calling skacceptqremoved(), permanently incrementing skackbacklog.
After approximately backlog+1 such failures, skacceptqisfull() returns true, causing the listener to reject all new connections.
Fix by moving skacceptqadded() to after the transport validation, matching the pattern used by vmcitransport and hypervtransport.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46214?
The severity of CVE-2026-46214 is rated as risk level 23.
How do I fix CVE-2026-46214?
To fix CVE-2026-46214, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-46214?
CVE-2026-46214 affects the Linux kernel with vsock/virtio components.
What type of vulnerability is CVE-2026-46214?
CVE-2026-46214 is a vulnerability related to a count leak on transport mismatch in the vsock/virtio implementation.
When was CVE-2026-46214 published?
CVE-2026-46214 was published on May 28, 2026.