In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting
virtio_transport_init_zcopy_skb() uses iter->count as the size argument for msg_zerocopy_realloc(), which in turn passes it to mm_account_pinned_pages() for RLIMIT_MEMLOCK accounting. However, this function is called after virtio_transport_fill_skb() has already consumed the iterator via __zerocopy_sg_from_iter(), so on the last skb, iter->count will be 0, skipping the RLIMIT_MEMLOCK enforcement.
Pass pkt_len (the total bytes being sent) as an explicit parameter to virtio_transport_init_zcopy_skb() instead of reading the already-consumed iter->count.
This matches TCP and UDP, which both call msg_zerocopy_realloc() with the original message size.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18Upgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-toolsUpgrade kernel-livepatch-6.18.33-63.124Upgrade python3-perf6.18Upgrade kernel6.18-tools-develUpgrade perf6.18Upgrade kernel6.18-develUpgrade bpftool6.18 | Jul 8, 2026 | Jun 24, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-oem-24.04dUpgrade linux-image-genericUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-azure-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-gke-64kUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-azure-fdeUpgrade linux-image-realtime-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-awsUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-realtimeUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1008-oracle-64k | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub