SB20260625186 - Improper control of a resource through its lifetime in Linux kernel vmw_vsock

Description

This security bulletin contains information about 1 vulnerability.

1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-52994)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to bypass resource limit enforcement.

The vulnerability exists due to improper resource management in virtio_transport_init_zcopy_skb() when processing MSG_ZEROCOPY sends. A local user can send data using MSG_ZEROCOPY to bypass resource limit enforcement.

The issue occurs because pinned-pages accounting can use a consumed iterator count of 0 on the last skb, causing RLIMIT_MEMLOCK accounting to be skipped.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/1cb36e252211506f51095fe7ced8286cc77b4c80
• https://git.kernel.org/stable/c/6af1736b5810bc8a4a43a8518530113f5a757dc1
• https://git.kernel.org/stable/c/d0117950075f0a9d5944980784c719d8ebcd4bff