In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't. Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning. This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vsock: previene null-ptr-deref en vsock_*[has_data|has_space] Informes recientes han mostrado cómo a veces llamamos a vsock_*_has_data() cuando un socket vsock ha sido desasignado de un transporte (ver enlaces adjuntos), pero no deberíamos. Las confirmaciones anteriores deberían haber resuelto los problemas reales, pero es posible que tengamos más en el futuro, por lo que para evitar null-ptr-deref, podemos devolver 0 (sin espacio, sin datos disponibles) pero con una advertencia. De esta manera, el código debería continuar ejecutándose en un estado casi consistente y tener una advertencia que nos permita depurar problemas futuros.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-476
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-476
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36028a800> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd36b1620c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd384947440> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd384947c00> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd370346200> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd39c47bec0> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd3606e26c0> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd38427f540> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd36b506880> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd370347e40> | Operating System |
| linux | linux_kernel | 6.13 | <built-in method update of dict object at 0x7fd360638640> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:* |