SECURITY ANNOUNCEMENT

CVE-2026-99062

23 October 2026

receive accounting while re-evaluating virtio_transport_read_skb() after Subtract only skb->len minus the VSOCK offset from rx_bytes. Retain the full packet length for buf_used and peer credit.

Introduced

6.12.347893a41deaf28b53036d4ea7cd9f7d54e8874dfc

Fixed releases

6.12.113e4a0028b0d54b2c45e1dc8c0dd95fe3e9236f55b

6.18.5738bad3930b1185dd6c98db3dd342ddc123c6f3ef

7.2.11dd4b2f88ee517f9629d0d3dbfced02ffbc33e2dc

7.3a463f55c791b96cfd12df8b10ea737d45c80bb18

View source announcement ↗