In the Linux kernel, the following vulnerability has been resolved:
vsock: fix recursive ->recvmsg calls
After a vsock socket has been added to a BPF sockmap, its prot->recvmsg has been replaced with vsock_bpf_recvmsg(). Thus the following recursiion could happen:
vsock_bpf_recvmsg() -> __vsock_recvmsg() -> vsock_connectible_recvmsg() -> prot->recvmsg() -> vsock_bpf_recvmsg() again
We need to fix it by calling the original ->recvmsg() without any BPF sockmap logic in __vsock_recvmsg().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-caviumUpgrade dtb-armUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-default-optional | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64k | Dec 13, 2024 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub