CVE-2026-23057 — Sensitive Information Exposure in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 4
Description
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: Coalesce only linear skb
vsock/virtio common tries to coalesce buffers in rx queue: if a linear skb
(with a spare tail room) is followed by a small skb (length limited by
GOOD_COPY_LEN = 128), an attempt is made to join them.
Since the introduction of MSG_ZEROCOPY support, assumption that a small skb
will always be linear is incorrect. In the zerocopy case, data is lost and
the linear skb is appended with uninit…
Affected Packages4 packages
▶CVEListV5linux/linux581512a6dc939ef122e49336626ae159f3b8a345 — 568e9cd8ed7ca9bf748c7687ba6501f29d30e59f+3
🔴Vulnerability Details
3GHSA▶
GHSA-2725-mxxg-w826: In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: Coalesce only linear skb
vsock/virtio common tries to coalesce buf↗2026-02-04
OSV▶
CVE-2026-23057: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Coalesce only linear skb vsock/virtio common tries to coalesce buffe↗2026-02-04