In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: discard packets if the transport changes
If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport.
A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-livepatch-5.10.234-225.895Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Mar 14, 2025 | Jan 31, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-livepatch-6.1.127-135.201Upgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Mar 27, 2025 | Jan 31, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jun 13, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | May 7, 2025 | Jan 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Jun 11, 2025 | Jan 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 10, 2025 | Jan 31, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Jan 31, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade rvUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade rtlaUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-devel | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-devel-azure | Feb 14, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-intelUpgrade linux-image-nvidia-tegraUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1013-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1030-azureUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1020-oemUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-raspi-realtime | Mar 28, 2025 | Jan 31, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub