Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-50264

vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After-Free condition. This issue is resolved by initializing vsk->trans to NULL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < 5f092a4271f6dccf88fe0d132475a17b69ef71dfaffected
  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < fd8ae346692a56b4437d626c5460c7104980f389affected
  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < eb1bdcb7dfc30b24495ee4c5533af0ed135cb5f1affected
  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < 2a6a4e69f255b7aed17f93995691ab4f0d3c2203affected
  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < 44d29897eafd0e1196453d3003a4d5e0b968eeabaffected
  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < b110196fec44fe966952004bd426967c2a8fd358affected
  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < 5f970935d09934222fdef3d0e20c648ea7a963c1affected
  • 06a8fc78367d070720af960dcecec917d3ae5f3b to < 6ca575374dd9a507cdd16dfa0e78c2e9e20bd05faffected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 4.19.324 to ≤ 4.19.*unaffected
  • 5.4.286 to ≤ 5.4.*unaffected
  • 5.10.230 to ≤ 5.10.*unaffected
  • 5.15.172 to ≤ 5.15.*unaffected
  • 6.1.117 to ≤ 6.1.*unaffected
  • 6.6.61 to ≤ 6.6.*unaffected
  • 6.11.8 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References