In the Linux kernel, the following vulnerability has been resolved:
vsock: Keep the binding until socket destruction
Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bound through autobind during connect().
Prevents socket unbinding during a transport reassignment, which fixes a use-after-free:
1. vsock_create() (refcnt=1) calls vsock_insert_unbound() (refcnt=2) 2. transport->release() calls vsock_remove_bound() without checking if sk was bound and moved to bound list (refcnt=1) 3. vsock_bind() assumes sk is in unbound list and before __vsock_insert_bound(vsock_bound_sockets()) calls __vsock_remove_bound() which does: list_del_init(&vsk->bound_table); // nop sock_put(&vsk->sk); // refcnt=0
BUG: KASAN: slab-use-after-free in __vsock_bind+0x62e/0x730 Read of size 4 at addr ffff88816b46a74c by task a.out/2057 dump_stack_lvl+0x68/0x90 print_report+0x174/0x4f6 kasan_report+0xb9/0x190 __vsock_bind+0x62e/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Allocated by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 __kasan_slab_alloc+0x85/0x90 kmem_cache_alloc_noprof+0x131/0x450 sk_prot_alloc+0x5b/0x220 sk_alloc+0x2c/0x870 __vsock_create.constprop.0+0x2e/0xb60 vsock_create+0xe4/0x420 __sock_create+0x241/0x650 __sys_socket+0xf2/0x1a0 __x64_sys_socket+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Freed by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 kasan_save_free_info+0x37/0x60 __kasan_slab_free+0x4b/0x70 kmem_cache_free+0x1a1/0x590 __sk_destruct+0x388/0x5a0 __vsock_bind+0x5e1/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:25 refcount_warn_saturate+0xce/0x150 RIP: 0010:refcount_warn_saturate+0xce/0x150 __vsock_bind+0x66d/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: underflow; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:28 refcount_warn_saturate+0xee/0x150 RIP: 0010:refcount_warn_saturate+0xee/0x150 vsock_remove_bound+0x187/0x1e0 __vsock_release+0x383/0x4a0 vsock_release+0x90/0x120 __sock_release+0xa3/0x250 sock_close+0x14/0x20 __fput+0x359/0xa80 task_work_run+0x107/0x1d0 do_exit+0x847/0x2560 do_group_exit+0xb8/0x250 __x64_sys_exit_group+0x3a/0x50 x64_sys_call+0xfec/0x14f0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debugUpgrade bpftoolUpgrade kernel-64k-develUpgrade kernel-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-rt-64k-modules | May 22, 2025 | Feb 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-livepatch-5.10.235-227.919Upgrade bpftool-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Apr 2, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfo | Apr 2, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Feb 27, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 1, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | May 26, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 20, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade bpftoolUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernelUpgrade bpftool-debuginfoUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade libperf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade rtlaUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-devel | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-renesasUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rt | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1082-awsUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1082-aws-fipsUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-kvmUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-138-generic-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1076-raspiUpgrade linux-image-5.15.0-138-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1023-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-138-fipsUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1087-azureUpgrade linux-image-5.15.0-1079-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-138-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1079-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1064-gkeopUpgrade linux-image-5.15.0-1035-nvidia-tegraUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-138-generic-lpaeUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1035-nvidia-tegra-rtUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1023-nvidia-tegra-igxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1046-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-5.15.0-1076-nvidiaUpgrade linux-image-5.15.0-1087-azure-fipsUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-5.15.0-138-lowlatencyUpgrade linux-image-5.15.0-1076-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-1087-azure-fdeUpgrade linux-image-5.15.0-1082-realtimeUpgrade linux-image-5.15.0-1075-intel-iot-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04 | Apr 24, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub