In the Linux kernel, the following vulnerability has been resolved:
vsock: Keep the binding until socket destruction
Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bound through autobind during connect().
Prevents socket unbinding during a transport reassignment, which fixes a use-after-free:
1. vsock_create() (refcnt=1) calls vsock_insert_unbound() (refcnt=2) 2. transport->release() calls vsock_remove_bound() without checking if sk was bound and moved to bound list (refcnt=1) 3. vsock_bind() assumes sk is in unbound list and before __vsock_insert_bound(vsock_bound_sockets()) calls __vsock_remove_bound() which does: list_del_init(&vsk->bound_table); // nop sock_put(&vsk->sk); // refcnt=0
BUG: KASAN: slab-use-after-free in __vsock_bind+0x62e/0x730 Read of size 4 at addr ffff88816b46a74c by task a.out/2057 dump_stack_lvl+0x68/0x90 print_report+0x174/0x4f6 kasan_report+0xb9/0x190 __vsock_bind+0x62e/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Allocated by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 __kasan_slab_alloc+0x85/0x90 kmem_cache_alloc_noprof+0x131/0x450 sk_prot_alloc+0x5b/0x220 sk_alloc+0x2c/0x870 __vsock_create.constprop.0+0x2e/0xb60 vsock_create+0xe4/0x420 __sock_create+0x241/0x650 __sys_socket+0xf2/0x1a0 __x64_sys_socket+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Freed by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 kasan_save_free_info+0x37/0x60 __kasan_slab_free+0x4b/0x70 kmem_cache_free+0x1a1/0x590 __sk_destruct+0x388/0x5a0 __vsock_bind+0x5e1/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:25 refcount_warn_saturate+0xce/0x150 RIP: 0010:refcount_warn_saturate+0xce/0x150 __vsock_bind+0x66d/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: underflow; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:28 refcount_warn_saturate+0xee/0x150 RIP: 0010:refcount_warn_saturate+0xee/0x150 vsock_remove_bound+0x187/0x1e0 __vsock_release+0x383/0x4a0 vsock_release+0x90/0x120 __sock_release+0xa3/0x250 sock_close+0x14/0x20 __fput+0x359/0xa80 task_work_run+0x107/0x1d0 do_exit+0x847/0x2560 do_group_exit+0xb8/0x250 __x64_sys_exit_group+0x3a/0x50 x64_sys_call+0xfec/0x14f0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-64kUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade rvUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-rt-64k-devel | May 22, 2025 | Feb 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.235-227.919Upgrade kernel-livepatch-5.15.179-121.185Upgrade perf-debuginfoUpgrade kernel-tools-devel | Apr 2, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64 | Apr 2, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Feb 27, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jul 1, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | May 26, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 20, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-debug-debuginfoUpgrade python3-perfUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernelUpgrade bpftool-debuginfoUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade libperf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvm | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-armUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-renesasUpgrade kernel-syms | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1078-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1087-azureUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1082-awsUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1081-gcp-fipsUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1023-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-138-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-138-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1076-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1082-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-138-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1076-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1079-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1023-nvidia-tegra-igxUpgrade linux-image-5.15.0-1046-xilinx-zynqmpUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1035-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1035-nvidia-tegraUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-138-lowlatencyUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1087-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1082-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1076-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-138-genericUpgrade linux-image-awsUpgrade linux-image-5.15.0-1075-intel-iot-realtimeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1087-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-138-generic-lpaeUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1079-oracleUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1064-gkeop | Apr 24, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub