CVE-2026-46234

In the Linux kernel, the following vulnerability has been resolved:

vsock: fix buffer size clamping order

In vsock_update_buffer_size(), the buffer size was being clamped to the

maximum first, and then to the minimum. If a user sets a minimum buffer

size larger than the maximum, the minimum check overrides the maximum

check, inverting the constraint.

This breaks the intended socket memory boundaries by allowing the

vsk->buffer_size to grow beyond the configured vsk->buffer_max_size.

Fix this by checking the minimum first, and then the maximum. This

ensures the buffer size never exceeds the buffer_max_size.