Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38403

vsock/vmci: Clear the vmci transport packet properly when initializing it

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet before populating the fields to avoid any uninitialised data being left in the structure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d021c344051af91f42c5ba9fdedc176740cbd238 to < 19c2cc01ff9a8031398a802676ffb0f4692dd95daffected
  • d021c344051af91f42c5ba9fdedc176740cbd238 to < 1c1bcb0e78230f533b4103e8cf271d17c3f469f0affected
  • d021c344051af91f42c5ba9fdedc176740cbd238 to < 2d44723a091bc853272e1a51a488a3d22b80be5eaffected
  • d021c344051af91f42c5ba9fdedc176740cbd238 to < 0a01021317375b8d1895152f544421ce49299eb1affected
  • d021c344051af91f42c5ba9fdedc176740cbd238 to < 94d0c326cb3ee6b0f8bd00e209550b93fcc5c839affected
  • d021c344051af91f42c5ba9fdedc176740cbd238 to < 75705b44e0b9aaa74f4c163d93d388bcba9e386aaffected
  • d021c344051af91f42c5ba9fdedc176740cbd238 to < e9a673153d578fd439919a24e99851b2f87ecbceaffected
  • d021c344051af91f42c5ba9fdedc176740cbd238 to < 223e2288f4b8c262a864e2c03964ffac91744cd5affected

Linux Linux

Default version status: affected

  • 3.9affected
  • 0 to < 3.9unaffected
  • 5.4.296 to ≤ 5.4.*unaffected
  • 5.10.240 to ≤ 5.10.*unaffected
  • 5.15.187 to ≤ 5.15.*unaffected
  • 6.1.144 to ≤ 6.1.*unaffected
  • 6.6.97 to ≤ 6.6.*unaffected
  • 6.12.37 to ≤ 6.12.*unaffected
  • 6.15.6 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References