CVE-2026-53132

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vsock/virtio component where a potential unbounded skb (socket buffer) queue can occur. The virtio transport inc rx pkt() function checks if vvs->rx bytes plus the packet length exceeds vvs->buf alloc. However, the virtio transport recv enqueue() function skips coalescing for packets containing the VIRTIO VSOCK SEQ EOM flag. If the system receives a large volume of packets with a length of 0 and the VIRTIO VSOCK SEQ EOM flag, an excessive number of packets can be queued because vvs->rx bytes remains at 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.