HomeDefectsLIN1022-25901
Acknowledged

LIN1022-25901 : Security Advisory - linux - CVE-2026-46234

Created: May 29, 2026    Updated: Jun 9, 2026
Found In Version: 10.22.33.2
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  vsock: fix buffer size clamping order  In vsock_update_buffer_size(), the buffer size was being clamped to the maximum first, and then to the minimum. If a user sets a minimum buffer size larger than the maximum, the minimum check overrides the maximum check, inverting the constraint.  This breaks the intended socket memory boundaries by allowing the vsk->buffer_size to grow beyond the configured vsk->buffer_max_size.  Fix this by checking the minimum first, and then the maximum. This ensures the buffer size never exceeds the buffer_max_size.