PT-2022-28567

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.303 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28621

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.4.180 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28668

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.10.101 Description The issue is related to the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been prove...

PT-2022-28584

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.268 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28819

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.16.10 Description The issue is related to the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28733

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.15.24 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2024-10490

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.y Description The issue is related to the vsock component of the Linux kernel, where a signal interrupting a connection can lead to the socket being added to the connected table multiple times, causing list...

GSD-2021-1000350 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000240 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000240 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000350 vsock/virtio: free queued packets when closing socket

vsock/virtio: free queued packets when closing socket This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

PT-2021-28705

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.12.3 Description The issue concerns the handling of queued packets when closing a socket in the vsock/virtio component. It was introduced in version v5.2 and fixed in version v5.12.4. The actual impact and...

PT-2021-28815

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.10.36 Description The issue concerns the vsock/virtio component, where queued packets are not properly freed when a socket is closed. This problem was introduced in version v5.2 and is fixed in version...

PT-2021-24821

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue concerns the handling of queued packets when closing a socket in the vsock/virtio component. It was introduced in version v5.2 and fixed in version v5.10.37. The actual impact and...

PT-2021-24711

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.12.3 Description The issue concerns the handling of queued packets when closing a socket in the vsock/virtio component. It was introduced in version v5.2 and fixed in version v5.12.4. The actual impact and...

PT-2021-8268 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the Linux kernel when closing a socket. Specifically, the vsock/virtio component fails to free queued packets, leading to a memory leak. This w...

The vulnerability in the socket implementation with address mapping AF_VSOCK in Linux kernel allows attackers to escalate their privileges.

The vulnerability in the socket implementation with AFVSOCK addressing net/vmwvsock/afvsock.c in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

...

Privilege Escalation

Linux kerne is vulnerable to a local privilege escalation. Due to a wrong locking in net/vmwvsock/afvsock.c,the race conditions were implicitly introduced in the commits that added VSOCK multi-transport support...