CVE-2026-97995

In the Linux kernel, the following vulnerability has been resolved: virtioconsole: do not free control-out buffers on remove sendcontrolmsg publishes &portdev-cpkt as the control-out virtqueue cookie. removevqs walks every virtqueue and passes leftover cookies to freebuf, which treats them as...

CVE-2026-97995 virtio_console: do not free control-out buffers on remove

In the Linux kernel, the following vulnerability has been resolved: virtioconsole: do not free control-out buffers on remove sendcontrolmsg publishes &portdev-cpkt as the control-out virtqueue cookie. removevqs walks every virtqueue and passes leftover cookies to freebuf, which treats them as...