Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-46234

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/05/2026
Última modificación:
28/05/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> vsock: fix buffer size clamping order<br /> <br /> In vsock_update_buffer_size(), the buffer size was being clamped to the<br /> maximum first, and then to the minimum. If a user sets a minimum buffer<br /> size larger than the maximum, the minimum check overrides the maximum<br /> check, inverting the constraint.<br /> <br /> This breaks the intended socket memory boundaries by allowing the<br /> vsk-&gt;buffer_size to grow beyond the configured vsk-&gt;buffer_max_size.<br /> <br /> Fix this by checking the minimum first, and then the maximum. This<br /> ensures the buffer size never exceeds the buffer_max_size.

Impacto