In the Linux kernel, the following vulnerability has been resolved:
vsock/bpf: return early if transport is not assigned
Some of the core functions can only be called if the transport has been assigned.
As Michal reported, a socket might have the transport at NULL, for example after a failed connect(), causing the following trace:
BUG: kernel NULL pointer dereference, address: 00000000000000a0 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 12faf8067 P4D 12faf8067 PUD 113670067 PMD 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 15 UID: 0 PID: 1198 Comm: a.out Not tainted 6.13.0-rc2+ RIP: 0010:vsock_connectible_has_data+0x1f/0x40 Call Trace: vsock_bpf_recvmsg+0xca/0x5e0 sock_recvmsg+0xb9/0xc0 __sys_recvfrom+0xb3/0x130 __x64_sys_recvfrom+0x20/0x30 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
So we need to check the `vsk->transport` in vsock_bpf_recvmsg(), especially for connected sockets (stream/seqpacket) as we already do in __vsock_connectible_recvmsg().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2025 |
| Suse | — | Upgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade dtb-sprdUpgrade dtb-nvidia | Feb 14, 2025 | Jan 31, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1030-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.8.0-1018-azure-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1030-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1012-awsUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-62-genericUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04 | Apr 24, 2025 | Jan 31, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub