CVE-2024-53119

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

virtio/vsock: Fix accept_queue memory leak

As the final stages of socket destruction may be delayed, it is possible

that virtio_transport_recv_listen() will be called after the accept_queue

has been flushed, but before the SOCK_DONE flag has been set. As a result,

sockets enqueued after the flush would remain unremoved, leading to a

memory leak.

vsock_release

__vsock_release

lock

virtio_transport_release

virtio_transport_close

schedule_delayed_work(close_work)

sk_shutdown = SHUTDOWN_MASK

(!) flush accept_queue

release

virtio_transport_recv_pkt

vsock_find_bound_socket

lock

if flag(SOCK_DONE) return

virtio_transport_recv_listen

child = vso

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References