CVE-2026-52994

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vsock/virtio implementation regarding MSG ZEROCOPY pinned-pages accounting. The function virtio transport init zcopy skb() uses iter->count as the size argument for msg zerocopy realloc(), which subsequently passes it to mm account pinned pages() for RLIMIT MEMLOCK accounting. Because this occurs after virtio transport fill skb() has already consumed the iterator via zerocopy sg from iter(), the iter->count value becomes 0 on the last skb, allowing the system to skip RLIMIT MEMLOCK enforcement.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.