vsock_poc

vsockpoc Investigating the bug behind CVE-2021-26708 This repo contains a small writeup about CVE-2021-26708, and how this bug can be turned into a Use After Free write primitive. The PoC here is not a full exploit, but just my harness I used when trying to investigate this bug. It can successful...

The vulnerability of the vmci_transport_recv_listen() function in the net/vmw_vsock/vmci_transport.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vmcitransportrecvlisten function in the net/vmwvsock/vmcitransport.c module, which is part of the networking functions of the Linux kernel, is related to resource management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098945)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098945 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect if already established During connect, acting on a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098841)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098841 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: cap TX credit to local buffer size The virtio transports derives its TX credit...

CVE-2026-74613

A flaw was found in the Linux kernel's vsock/virtio component. A race condition during the teardown of the receive RX queue can allow work to add buffers after the virtual queues virtqueues have been deleted. This can lead to a use-after-free vulnerability, which may result in a kernel panic and ...

CVE-2026-74614

A flaw was found in the Linux kernel's vsock/virtio component. During system suspend and resume operations, a worker process might incorrectly retain a pointer to a deleted virtual queue while observing a replacement queue's running state. This inconsistent state can lead to system instability or...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: virtio/vsock: Fixed an uninit-value issue in virtiotransportrecvpkt KMSAN reported the following uninit-value access issues: ===================================================== BUG: KMSAN: uninit-value in...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the vhost-vsock device of QEMU. In the event of an error, an invalid element was not detached from the virtqueue before freeing its memory, resulting in memory leakage and other unexpected issues. This issue affects QEMU versions up to 6.2.0...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vsock: Remove the socket from the connected list when the connect operation is interrupted by a signal. The vsockconnect function expects that the socket might already be in the TCPESTABLISHED state when the connect operation is...

SUSE CVE-2026-74613

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

SUSE CVE-2026-74614

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

CVE-2026-74614

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

AZL-97226 CVE-2026-74614 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

CVE-2026-74613

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

AZL-97253 CVE-2026-74613 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

CVE-2026-74613

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

UBUNTU-CVE-2026-74613

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 "vsock/virtio: stop workers during the .remove" made the RX worker jump to its common exit when rxrun is clear. That exit still refills the RX queue wh...

UBUNTU-CVE-2026-74614

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

CVE-2026-74614

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...