In the Linux kernel, the following vulnerability has been resolved:
vsock: fix recursive ->recvmsg calls
After a vsock socket has been added to a BPF sockmap, its prot->recvmsg has been replaced with vsock_bpf_recvmsg(). Thus the following recursiion could happen:
vsock_bpf_recvmsg() -> __vsock_recvmsg() -> vsock_connectible_recvmsg() -> prot->recvmsg() -> vsock_bpf_recvmsg() again
We need to fix it by calling the original ->recvmsg() without any BPF sockmap logic in __vsock_recvmsg().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-debugUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Jan 15, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpae | Dec 13, 2024 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub