CVE-2026-64552

The CVE is for Linux kernel virtio-net: receive_big() len check. The vulnerability arises because device-announced length is bounded by (big_packets_num_skbfrags + 1) * PAGE_SIZE, but add_recvbuf_big() places the header at an offset in the first page, creating a gap where a malicious virtio backe...