A newly published Linux kernel CVE is drawing attention for a familiar but dangerous reason: a trusted control path accepted attacker-controlled data without enforcing a hard ceiling. In CVE-2026-31464, the ibmvfc driver can take a num_written value from a VIO server’s discover-targets MAD...