PT-2026-50250

Name of the Vulnerable Software and Affected Versions virtio-win versions mm210 through mm319 Description The Viosock driver allows a low-privilege local process to submit an IOCTL SELECT request with controlled VIRTIO VSOCK SELECT.Fdss.fd count values. These values can cause an overflow in the...

CVE-2026-46655

A flaw was found in virtio-win. A low-integrity process can issue an IOCTL request to viosock.sys!VIOSockSelect with a maliciously crafted request that causes an integer overflow. This allows the process to circumvent bounds checking, resulting in a heap overflow in the NonPagedPool kernel heap...

Linux Distros Unpatched Vulnerability : CVE-2026-46655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit...