CVE-2024-44996

vsock: fix recursive ->recvmsg calls

published September 4, 2024

CVSS
—
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

vsock: fix recursive ->recvmsg calls

After a vsock socket has been added to a BPF sockmap, its prot->recvmsg

has been replaced with vsock_bpf_recvmsg(). Thus the following

recursiion could happen:

vsock_bpf_recvmsg()

-> __vsock_recvmsg()

-> vsock_connectible_recvmsg()

-> prot->recvmsg()

-> vsock_bpf_recvmsg() again

We need to fix it by calling the original ->recvmsg() without any BPF

sockmap logic in __vsock_recvmsg().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.9th percentile
Published
2024-09-04T19:54Z
EPSS history
Timeline
  • 04 SEP 19:54Z
    vsock: fix recursive ->recvmsg calls
    cvelistv5