In the Linux kernel, the following vulnerability has been resolved:
vsock: Keep the binding until socket destruction
Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bound through autobind during connect().
Prevents socket unbinding during a transport reassignment, which fixes a use-after-free:
1. vsock_create() (refcnt=1) calls vsock_insert_unbound() (refcnt=2) 2. transport->release() calls vsock_remove_bound() without checking if sk was bound and moved to bound list (refcnt=1) 3. vsock_bind() assumes sk is in unbound list and before __vsock_insert_bound(vsock_bound_sockets()) calls __vsock_remove_bound() which does: list_del_init(&vsk->bound_table); // nop sock_put(&vsk->sk); // refcnt=0
BUG: KASAN: slab-use-after-free in __vsock_bind+0x62e/0x730 Read of size 4 at addr ffff88816b46a74c by task a.out/2057 dump_stack_lvl+0x68/0x90 print_report+0x174/0x4f6 kasan_report+0xb9/0x190 __vsock_bind+0x62e/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Allocated by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 __kasan_slab_alloc+0x85/0x90 kmem_cache_alloc_noprof+0x131/0x450 sk_prot_alloc+0x5b/0x220 sk_alloc+0x2c/0x870 __vsock_create.constprop.0+0x2e/0xb60 vsock_create+0xe4/0x420 __sock_create+0x241/0x650 __sys_socket+0xf2/0x1a0 __x64_sys_socket+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Freed by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 kasan_save_free_info+0x37/0x60 __kasan_slab_free+0x4b/0x70 kmem_cache_free+0x1a1/0x590 __sk_destruct+0x388/0x5a0 __vsock_bind+0x5e1/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:25 refcount_warn_saturate+0xce/0x150 RIP: 0010:refcount_warn_saturate+0xce/0x150 __vsock_bind+0x66d/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: underflow; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:28 refcount_warn_saturate+0xee/0x150 RIP: 0010:refcount_warn_saturate+0xee/0x150 vsock_remove_bound+0x187/0x1e0 __vsock_release+0x383/0x4a0 vsock_release+0x90/0x120 __sock_release+0xa3/0x250 sock_close+0x14/0x20 __fput+0x359/0xa80 task_work_run+0x107/0x1d0 do_exit+0x847/0x2560 do_group_exit+0xb8/0x250 __x64_sys_exit_group+0x3a/0x50 x64_sys_call+0xfec/0x14f0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade perfUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade rvUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-modules-core | May 22, 2025 | Feb 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.235-227.919Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Apr 2, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf | Apr 2, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Feb 27, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jul 1, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | May 26, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 20, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade rvUpgrade python3-perfUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernelUpgrade bpftool-debuginfoUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-debuginfo-common-x86_64Upgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-headers | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-rt-vdso | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1082-aws-fipsUpgrade linux-image-5.15.0-1078-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.15.0-1081-gcp-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-genericUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1082-awsUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1087-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1076-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-138-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-138-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1023-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-138-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1082-realtimeUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1087-azure-fipsUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-5.15.0-1076-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1064-gkeopUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-5.15.0-138-generic-lpaeUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1035-nvidia-tegraUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1075-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1079-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-138-lowlatencyUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-5.15.0-1076-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-138-genericUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-1087-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1035-nvidia-tegra-rtUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1079-gkeUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-5.15.0-1023-nvidia-tegra-igxUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1046-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04 | Apr 24, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub