In the Linux kernel, the following vulnerability has been resolved:
vhost/vsock: always initialize seqpacket_allow
There are two issues around seqpacket_allow: 1. seqpacket_allow is not initialized when socket is created. Thus if features are never set, it will be read uninitialized. 2. if VIRTIO_VSOCK_F_SEQPACKET is set and then cleared, then seqpacket_allow will not be cleared appropriately (existing apps I know about don't usually do this but it's legal and there's no way to be sure no one relies on this).
To fix: - initialize seqpacket_allow after allocation - set it unconditionally in set_features
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.165-110.161Upgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools | Sep 16, 2024 | Aug 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.106-116.188Upgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Feb 17, 2025 | Aug 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Aug 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Aug 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade dtb-allwinner | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-intel | Nov 12, 2024 | Aug 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub