In the Linux kernel, the following vulnerability has been resolved:
vhost/vsock: always initialize seqpacket_allow
There are two issues around seqpacket_allow: 1. seqpacket_allow is not initialized when socket is created. Thus if features are never set, it will be read uninitialized. 2. if VIRTIO_VSOCK_F_SEQPACKET is set and then cleared, then seqpacket_allow will not be cleared appropriately (existing apps I know about don't usually do this but it's legal and there's no way to be sure no one relies on this).
To fix: - initialize seqpacket_allow after allocation - set it unconditionally in set_features
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.165-110.161Upgrade python-perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Sep 16, 2024 | Aug 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.106-116.188Upgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf | Feb 17, 2025 | Aug 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Aug 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Aug 21, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade dtb-altera | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04 | Nov 12, 2024 | Aug 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub