CVE-2024-43873

vhost/vsock: always initialize seqpacket_allow

published August 21, 2024

CVSS
—
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

vhost/vsock: always initialize seqpacket_allow

There are two issues around seqpacket_allow:

1. seqpacket_allow is not initialized when socket is

created. Thus if features are never set, it will be

read uninitialized.

2. if VIRTIO_VSOCK_F_SEQPACKET is set and then cleared,

then seqpacket_allow will not be cleared appropriately

(existing apps I know about don't usually do this but

it's legal and there's no way to be sure no one relies

on this).

To fix:

- initialize seqpacket_allow after allocation

- set it unconditionally in set_features

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Published
2024-08-21T00:06Z
EPSS history
Timeline
  • 21 AUG 00:06Z
    vhost/vsock: always initialize seqpacket_allow
    cvelistv5