CVE-2026-46207

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vsock/virtio component where non-linear skbs (socket buffers) result in an empty payload in the tap skb. The virtio transport build skb() function utilizes virtio transport copy nonlinear skb() to copy the original payload to the vsockmon tap device. However, the iov iter is manually initialized without setting iov iter.count. Because the iov iter is zero-initialized, the copy length remains zero, causing no payload to be copied to the monitor interface and leaving data uninitialized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.