CVE-2026-63970

CVE-2026-63970 — Linux kernel vulnerability in vsock/virtio where zerocopy skb handling could fail due to allocation order: uarg must be bound before filling the skb to ensure correct lifetime handling. The fix ensures the zerocopy uarg is passed into virtio_transport_alloc_skb() and bound prior ...