Azure Linux 3.0 Security Update: kernel (CVE-2024-44996)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44996 advisory. - In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive -recvmsg calls Afte...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21670)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21670 advisory. - In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is...

Linux Module Net VmW Vsock Bpf Heap Buffer Overflow DoS

The vulnerability in the module net/vmwvsock/vsockbpf.c of Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2025-21670

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...

AZL-56396 CVE-2025-21670 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...

CVE-2025-21670 vsock/bpf: return early if transport is not assigned

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...

CVE-2025-21670

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...

CVE-2025-21670: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the transport at NULL, for example after a failed...

PT-2025-4351

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.73/6.12.10 Description The issue is related to a null pointer dereference in the Linux kernel's vsock/bpf module. This can occur when a socket has a null transport, for example, after a failed connect call. T...

PT-2024-31353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a recursive call in the vsock bpf recvmsg function after a vsock socket has been added to a BPF sockmap. The prot-recvmsg has been replaced with vsock bpf recvmsg...