In the Linux kernel, the following vulnerability has been resolved:
vsock/bpf: return early if transport is not assigned
Some of the core functions can only be called if the transport has been assigned.
As Michal reported, a socket might have the transport at NULL, for example after a failed connect(), causing the following trace:
BUG: kernel NULL pointer dereference, address: 00000000000000a0 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12faf8067 P4D 12faf8067 PUD 113670067 PMD 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 15 UID: 0 PID: 1198 Comm: a.out Not tainted 6.13.0-rc2+ RIP: 0010:vsock_connectible_has_data+0x1f/0x40 Call Trace: vsock_bpf_recvmsg+0xca/0x5e0 sock_recvmsg+0xb9/0xc0 __sys_recvfrom+0xb3/0x130 __x64_sys_recvfrom+0x20/0x30 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
So we need to check the `vsk->transport` in vsock_bpf_recvmsg(), especially for connected sockets (stream/seqpacket) as we already do in __vsock_connectible_recvmsg().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-rtUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade dtb-qcomUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-default-extra | Feb 14, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-raspiUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1030-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1013-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1011-raspi | Apr 24, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub