In the Linux kernel, the following vulnerability has been resolved:
vsock/bpf: return early if transport is not assigned
Some of the core functions can only be called if the transport has been assigned.
As Michal reported, a socket might have the transport at NULL, for example after a failed connect(), causing the following trace:
BUG: kernel NULL pointer dereference, address: 00000000000000a0 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12faf8067 P4D 12faf8067 PUD 113670067 PMD 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 15 UID: 0 PID: 1198 Comm: a.out Not tainted 6.13.0-rc2+ RIP: 0010:vsock_connectible_has_data+0x1f/0x40 Call Trace: vsock_bpf_recvmsg+0xca/0x5e0 sock_recvmsg+0xb9/0xc0 __sys_recvfrom+0xb3/0x130 __x64_sys_recvfrom+0x20/0x30 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
So we need to check the `vsk->transport` in vsock_bpf_recvmsg(), especially for connected sockets (stream/seqpacket) as we already do in __vsock_connectible_recvmsg().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2025 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-develUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-source-vanilla | Feb 14, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1029-oemUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-azureUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1013-azureUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04b | Apr 24, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub