In the Linux kernel, the following vulnerability has been resolved:
vhost/vsock: always initialize seqpacket_allow
There are two issues around seqpacket_allow: 1. seqpacket_allow is not initialized when socket is created. Thus if features are never set, it will be read uninitialized. 2. if VIRTIO_VSOCK_F_SEQPACKET is set and then cleared, then seqpacket_allow will not be cleared appropriately (existing apps I know about don't usually do this but it's legal and there's no way to be sure no one relies on this).
To fix: - initialize seqpacket_allow after allocation - set it unconditionally in set_features
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headers | Sep 16, 2024 | Aug 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-6.1.106-116.188Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfo | Feb 17, 2025 | Aug 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Aug 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Aug 21, 2024 |
| Suse | — | Upgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azure | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04 | Nov 12, 2024 | Aug 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub