In the Linux kernel, the following vulnerability has been resolved:
vsock: Keep the binding until socket destruction
Preserve sockets bindings; this includes both resulting from an explicit bind() and those implicitly bound through autobind during connect().
Prevents socket unbinding during a transport reassignment, which fixes a use-after-free:
1. vsock_create() (refcnt=1) calls vsock_insert_unbound() (refcnt=2) 2. transport->release() calls vsock_remove_bound() without checking if sk was bound and moved to bound list (refcnt=1) 3. vsock_bind() assumes sk is in unbound list and before __vsock_insert_bound(vsock_bound_sockets()) calls __vsock_remove_bound() which does: list_del_init(&vsk->bound_table); // nop sock_put(&vsk->sk); // refcnt=0
BUG: KASAN: slab-use-after-free in __vsock_bind+0x62e/0x730 Read of size 4 at addr ffff88816b46a74c by task a.out/2057 dump_stack_lvl+0x68/0x90 print_report+0x174/0x4f6 kasan_report+0xb9/0x190 __vsock_bind+0x62e/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Allocated by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 __kasan_slab_alloc+0x85/0x90 kmem_cache_alloc_noprof+0x131/0x450 sk_prot_alloc+0x5b/0x220 sk_alloc+0x2c/0x870 __vsock_create.constprop.0+0x2e/0xb60 vsock_create+0xe4/0x420 __sock_create+0x241/0x650 __sys_socket+0xf2/0x1a0 __x64_sys_socket+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Freed by task 2057: kasan_save_stack+0x1e/0x40 kasan_save_track+0x10/0x30 kasan_save_free_info+0x37/0x60 __kasan_slab_free+0x4b/0x70 kmem_cache_free+0x1a1/0x590 __sk_destruct+0x388/0x5a0 __vsock_bind+0x5e1/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:25 refcount_warn_saturate+0xce/0x150 RIP: 0010:refcount_warn_saturate+0xce/0x150 __vsock_bind+0x66d/0x730 vsock_bind+0x97/0xe0 __sys_bind+0x154/0x1f0 __x64_sys_bind+0x6e/0xb0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
refcount_t: underflow; use-after-free. WARNING: CPU: 7 PID: 2057 at lib/refcount.c:28 refcount_warn_saturate+0xee/0x150 RIP: 0010:refcount_warn_saturate+0xee/0x150 vsock_remove_bound+0x187/0x1e0 __vsock_release+0x383/0x4a0 vsock_release+0x90/0x120 __sock_release+0xa3/0x250 sock_close+0x14/0x20 __fput+0x359/0xa80 task_work_run+0x107/0x1d0 do_exit+0x847/0x2560 do_group_exit+0xb8/0x250 __x64_sys_exit_group+0x3a/0x50 x64_sys_call+0xfec/0x14f0 do_syscall_64+0x93/0x1b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-headersUpgrade kernel-rt-64k-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-64k-develUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debugUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-docUpgrade kernel-rt-64kUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-devel-matchedUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-develUpgrade python3-perfUpgrade rtlaUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-uki-virtUpgrade kernel-64k-debug-devel | May 22, 2025 | Feb 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-livepatch-5.10.235-227.919Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Apr 2, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade perf-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-headers | Apr 2, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Feb 27, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jul 1, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | May 26, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 20, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade libperfUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade rvUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade bpftool | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kb | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1081-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-5.15.0-1082-aws-fipsUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-138-generic-64kUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1078-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-138-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1076-raspiUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1023-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-138-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1082-awsUpgrade linux-image-5.15.0-1087-azureUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1076-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1079-oracleUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1064-gkeopUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-5.15.0-138-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-5.15.0-1087-azure-fipsUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-138-lowlatencyUpgrade linux-image-5.15.0-1035-nvidia-tegra-rtUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1087-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1082-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-5.15.0-1076-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-138-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1079-gkeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1075-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1023-nvidia-tegra-igxUpgrade linux-image-5.15.0-1046-xilinx-zynqmpUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1035-nvidia-tegraUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-oem-24.04a | Apr 24, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub