Riskcovery

CVE-2024-44996

vsock: fix recursive ->recvmsg calls

State
Published
Severity
Not scored
Published
Sep 4, 2024
Updated
May 11, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

vsock: fix recursive ->recvmsg calls

After a vsock socket has been added to a BPF sockmap, its prot->recvmsg has been replaced with vsock_bpf_recvmsg(). Thus the following recursiion could happen:

vsock_bpf_recvmsg() -> __vsock_recvmsg() -> vsock_connectible_recvmsg() -> prot->recvmsg() -> vsock_bpf_recvmsg() again

We need to fix it by calling the original ->recvmsg() without any BPF sockmap logic in __vsock_recvmsg().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 634f1a7110b439c65fd8a809171c1d2d28bcea6f to before 921f1acf0c3cf6b1260ab57a8a6e8b3d5f3023d5Affected
  • 634f1a7110b439c65fd8a809171c1d2d28bcea6f to before b4ee8cf1acc5018ed1369150d7bb3e0d0f79e135Affected
  • 634f1a7110b439c65fd8a809171c1d2d28bcea6f to before 69139d2919dd4aa9a553c8245e7c63e82613e3fcAffected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.48 through 6.6.*Not affected
  • 6.10.7 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.