CVE-2026-46214 vsock/virtio: fix accept queue count leak on transport mismatch
A logic error in the Linux kernel's vsock/virtio module allows attackers to exhaust the accept queue, causing the listener to reject all new connections.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46214?
CVE-2026-46214 is a medium-severity denial of service vulnerability in Linux kernel, published on 28 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: fix accept queue count leak on transport mismatch
virtio_transport_recv_listen() calls sk_acceptq_added() before vsock_assign_transport(). If vsock_assign_transport() fails or selects a different transport, the error path returns without calling sk_acceptq_removed(), permanently incrementing sk_ack_backlog.
After approximately backlog+1 such failures, sk_acceptq_is_full() returns true, causing the listener to reject all new connections.
Fix by moving sk_acceptq_added() to after the transport validation, matching the pattern used by vmci_transport and hyperv_transport.
Which versions are affected by CVE-2026-46214?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-46214?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-46214 being exploited?
There is no known exploitation of CVE-2026-46214 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-88976, BELL-CVE-2026-46214, DEBIAN-CVE-2026-46214, GHSA-4ghp-qfgj-33p6, ROOT-OS-DEBIAN-11-CVE-2026-46214, ROOT-OS-DEBIAN-12-CVE-2026-46214 and 3 more.