Количество 17
Количество 17
GHSA-9v4w-r8xw-999h
In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY.

CVE-2025-38618
In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY.

CVE-2025-38618
In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY.

CVE-2025-38618
In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY.
CVE-2025-38618
In the Linux kernel, the following vulnerability has been resolved: v ...
ELSA-2025-20645
ELSA-2025-20645: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2025-20632
ELSA-2025-20632: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2025-20609
ELSA-2025-20609: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2025-20608
ELSA-2025-20608: Unbreakable Enterprise kernel security update (IMPORTANT)

SUSE-SU-2025:03314-1
Security update for the Linux Kernel

SUSE-SU-2025:03310-1
Security update for the Linux Kernel

SUSE-SU-2025:03344-1
Security update for the Linux Kernel

SUSE-SU-2025:03204-1
Security update for the Linux Kernel

SUSE-SU-2025:03272-1
Security update for the Linux Kernel

SUSE-SU-2025:03301-1
Security update for the Linux Kernel

SUSE-SU-2025:03382-1
Security update for the Linux Kernel

SUSE-SU-2025:03290-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
GHSA-9v4w-r8xw-999h In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY. | 0% Низкий | около 1 месяца назад | ||
![]() | CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY. | 0% Низкий | около 1 месяца назад | |
![]() | CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY. | CVSS3: 6.2 | 0% Низкий | около 1 месяца назад |
![]() | CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The socket returned by accept() also has port VMADDR_PORT_ANY but is not on the list of unbound sockets. Binding it will result in an extra refcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep the binding until socket destruction). Modify the check in __vsock_bind_connectible() to also prevent binding to VMADDR_PORT_ANY. | 0% Низкий | около 1 месяца назад | |
CVE-2025-38618 In the Linux kernel, the following vulnerability has been resolved: v ... | 0% Низкий | около 1 месяца назад | ||
ELSA-2025-20645 ELSA-2025-20645: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 дня назад | |||
ELSA-2025-20632 ELSA-2025-20632: Unbreakable Enterprise kernel security update (IMPORTANT) | 9 дней назад | |||
ELSA-2025-20609 ELSA-2025-20609: Unbreakable Enterprise kernel security update (IMPORTANT) | 11 дней назад | |||
ELSA-2025-20608 ELSA-2025-20608: Unbreakable Enterprise kernel security update (IMPORTANT) | 11 дней назад | |||
![]() | SUSE-SU-2025:03314-1 Security update for the Linux Kernel | 9 дней назад | ||
![]() | SUSE-SU-2025:03310-1 Security update for the Linux Kernel | 9 дней назад | ||
![]() | SUSE-SU-2025:03344-1 Security update for the Linux Kernel | 8 дней назад | ||
![]() | SUSE-SU-2025:03204-1 Security update for the Linux Kernel | 20 дней назад | ||
![]() | SUSE-SU-2025:03272-1 Security update for the Linux Kernel | 14 дней назад | ||
![]() | SUSE-SU-2025:03301-1 Security update for the Linux Kernel | 9 дней назад | ||
![]() | SUSE-SU-2025:03382-1 Security update for the Linux Kernel | 6 дней назад | ||
![]() | SUSE-SU-2025:03290-1 Security update for the Linux Kernel | 10 дней назад |
Уязвимостей на страницу