In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: discard packets if the transport changes
If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport.
A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.10.234-225.895Upgrade bpftoolUpgrade python-perf | Mar 14, 2025 | Jan 31, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-libbpf | Mar 27, 2025 | Jan 31, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Jun 13, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | May 7, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 10, 2025 | Jan 31, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | Jan 31, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-debuginfoUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-x86_64 | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade dtb-amlogic | Feb 14, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1012-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-intelUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-62-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-aws | Mar 28, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub