PT-2025-34364

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the vsock subsystem that allows a vsock to autobind to VMADDR PORT ANY. This can lead to a use-after-free issue when a connection is established to the bound socket, a...

PT-2025-30876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a time-of-check-to-time-of-use TOCTOU issue within the vsock subsystem. Specifically, vsock find cid and vsock dev do ioctl may experience a race condition duri...

kernel: vsock: remove vsock from connected table when connect is interrupted by a signal

A vulnerability was found in the Linux kernel's vsock subsystem's vsockstreamconnect function where improper handling of the socket state can lead to the connected table's list being corrupted. This occurs when a signal interrupt occurs and resets the socket's state without removing it from the...