CVE-2026-53132

A flaw was found in the Linux kernel's vsock/virtio component. A remote attacker could send specially crafted packets with zero length and an End-of-Message (EOM) flag. This could lead to an unbounded queue of packets, consuming excessive memory and potentially causing a Denial of Service (DoS) due to resource exhaustion.

This vulnerability is rated as Moderate impact because exploitation is restricted to environments actively utilizing virtio-based VSOCK communications between virtual machines and the host hypervisor, limiting the attack scope to local denial of service via memory exhaustion rather than arbitrary code execution. In typical Red Hat Enterprise Linux deployments, virtio-vsock is utilized only when explicitly configured for guest-host communication, limiting broader exposure across default server installations. An attacker on an established transport channel could trigger excessive kernel memory consumption by queueing non-coalesced zero-payload messages, leading to resource depletion without compromising data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.