Riskcovery

CVE-2024-53117

virtio/vsock: Improve MSG_ZEROCOPY error handling

State
Published
Severity
5.5 Medium
Published
Dec 2, 2024
Updated
May 11, 2026
Reserved
Nov 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio/vsock: Improve MSG_ZEROCOPY error handling

Add a missing kfree_skb() to prevent memory leaks.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 581512a6dc939ef122e49336626ae159f3b8a345 to before 50061d7319e21165d04e3024354c1b43b6137821Affected
  • 581512a6dc939ef122e49336626ae159f3b8a345 to before 60cf6206a1f513512f5d73fa4d3dbbcad2e7dcd6Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.11.10 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.