CVE-2026-97990

In the Linux kernel, the following vulnerability has been resolved: vdpasimnet: check TX pull result before RX copy vringhiovpulliotlb returns a signed byte count. A failed TX pull is currently added to the unsigned byte counter and then passed as a sizet length to receivefilter and...

CVE-2026-97990

The Linux kernel is vulnerable in the vdpa_sim_net component due to an improper check of the vringh_iov_pull_iotlb() return value. Because the function returns a signed byte count, a failed TX pull results in a negative error that is incorrectly added to an unsigned byte counter. This value is th...