CVE-2025-38403

vsock/vmci: Clear the vmci transport packet properly when initializing it

published July 25, 2025

CVSS
—
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

vsock/vmci: Clear the vmci transport packet properly when initializing it

In vmci_transport_packet_init memset the vmci_transport_packet before

populating the fields to avoid any uninitialised data being left in the

structure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.7th percentile
Published
2025-07-25T13:08Z
EPSS history
Timeline
  • 25 JUL 13:08Z
    vsock/vmci: Clear the vmci transport packet properly when initializing it
    cvelistv5