In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: read virtqueues under worker locks
Commit bd50c5dc182b ("vsock/virtio: add support for device suspend/resume") made the *_run flags transition from false to true when restore installs replacement virtqueues. The RX, TX and event workers read their virtqueue before locking and checking the corresponding flag, so a worker delayed across freeze and restore can observe the replacement queue's running state while retaining a pointer to the deleted queue.
Read each virtqueue under its mutex after checking the run flag, keeping the pointer and state in the same queue generation.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18Upgrade kernel6.18-toolsUpgrade kernel-livepatch-6.18.48-107.148Upgrade microvm-kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extraUpgrade bpftool6.18Upgrade perf6.18Upgrade kernel6.18-headersUpgrade kernel6.18-debuginfo-common-x86_64Upgrade perf6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-tools-develUpgrade python3-perf6.18Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-tools-debuginfo | Sep 30, 2026 | Aug 22, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 26, 2026 | Aug 26, 2026 |
| Redhat_linux | — | No solution exists | Aug 26, 2026 | Aug 22, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1117-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-aws-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-198-fipsUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub