In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: discard packets if the transport changes
If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport.
A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Mar 14, 2025 | Jan 31, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel | Mar 27, 2025 | Jan 31, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jun 13, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | May 7, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Jun 11, 2025 | Jan 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 10, 2025 | Jan 31, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Jan 31, 2025 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade rtlaUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-azureUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-source-rtUpgrade kernel-default-livepatch | Feb 14, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1012-awsUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1029-oemUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1030-azureUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-nvidia-lowlatency | Mar 28, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub