In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential unbounded skb queue virtio_transport_inc_rx_pkt() checks vvs->rx_bytes + len > vvs->buf_alloc. virtio_transport_recv_enqueue() skips coalescing for packets with VIRTIO_VSOCK_SEQ_EOM. If fed with packets with len == 0 and VIRTIO_VSOCK_SEQ_EOM, a very large number of packets can be queued because vvs->rx_bytes stays at 0. Fix this by estimating the skb metadata size: (Number of skbs in the queue) * SKB_TRUESIZE(0)

A flaw was found in the Linux kernel's vsock/virtio component. A remote attacker could send specially crafted packets with zero length and an End-of-Message (EOM) flag. This could lead to an unbounded queue of packets, consuming excessive memory and potentially causing a Denial of Service (DoS) due to resource exhaustion.

https://www.cve.org/CVERecord?id=CVE-2026-53132 https://nvd.nist.gov/vuln/detail/CVE-2026-53132 https://lore.kernel.org/linux-cve-announce/2026062541-CVE-2026-53132-7ab2@gregkh/T