CVE-2026-53365

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11 Linux kernel versions prior to 7.1 Linux kernel versions prior to 6.7 Linux kernel versions prior to 6.18.34

Description A memory management issue exists in the net/vmw vsock/virtio transport common.c file of the Linux kernel. When a large message is fragmented into multiple skbs (socket buffers), the zerocopy uarg is only allocated and attached to the final skb. Consequently, non-final skbs contain pinned user pages without completion tracking, preventing the kernel from notifying userspace when these pages can be reused. If the process loop terminates prematurely, the uarg is not allocated, leading to a leak of pinned pages. This flaw can be exploited to cause a denial of service.

Recommendations Update to version 7.0.11 or newer. Update to version 7.1 or newer. Update to version 6.7 or newer. Update to version 6.18.34 or newer.