In the Linux kernel, the following vulnerability has been resolved:
vhost/vsock: always initialize seqpacket_allow
There are two issues around seqpacket_allow: 1. seqpacket_allow is not initialized when socket is created. Thus if features are never set, it will be read uninitialized. 2. if VIRTIO_VSOCK_F_SEQPACKET is set and then cleared, then seqpacket_allow will not be cleared appropriately (existing apps I know about don't usually do this but it's legal and there's no way to be sure no one relies on this).
To fix: - initialize seqpacket_allow after allocation - set it unconditionally in set_features
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Sep 16, 2024 | Aug 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel | Feb 17, 2025 | Aug 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Aug 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Aug 21, 2024 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-20.04b | Nov 12, 2024 | Aug 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub