8.4

CVE-2026-74614

vsock/virtio: read virtqueues under worker locks

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: read virtqueues under worker locks

Commit bd50c5dc182b ("vsock/virtio: add support for device
suspend/resume") made the *_run flags transition from false to true when
restore installs replacement virtqueues.  The RX, TX and event workers
read their virtqueue before locking and checking the corresponding flag,
so a worker delayed across freeze and restore can observe the replacement
queue's running state while retaining a pointer to the deleted queue.

Read each virtqueue under its mutex after checking the run flag, keeping
the pointer and state in the same queue generation.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 762c251c7f5c4ee5bef71460c6e822ed293fd69f
Version < 941329ce14c5f481223a10d1d4c8b57ea7f3048a
Status affected
Version bd50c5dc182b0a52599f87b429f9a5a9cbfc9b1c
Version < 29dd10583bf9d2744cd84b862e4257c0a5699570
Status affected
Version bd50c5dc182b0a52599f87b429f9a5a9cbfc9b1c
Version < a1fb0c5b8a7c2753758aeced40971f99449dde0c
Status affected
Version bd50c5dc182b0a52599f87b429f9a5a9cbfc9b1c
Version < eae099c764c7ebdb842eb1f638913e310bdd6513
Status affected
Version bd50c5dc182b0a52599f87b429f9a5a9cbfc9b1c
Version < bd43a7ec668be428265b3209eb43647aedcf720a
Status affected
Version bd50c5dc182b0a52599f87b429f9a5a9cbfc9b1c
Version < 1cecb4202afdbeddcf29d59baf596ac6ab753f7f
Status affected
Version bd50c5dc182b0a52599f87b429f9a5a9cbfc9b1c
Version < ebac8f6b1ef0e9278afe204b8692a7479988dace
Status affected
Version 5.15.138
Version < 5.15.216
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.19
Status affected
Version 0
Version < 5.19
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.152
Status unaffected
Version <= 6.12.*
Version 6.12.104
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.067
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/1cecb4202afdbeddcf29d59baf596ac6ab753f7f
https://git.kernel.org/stable/c/29dd10583bf9d2744cd84b862e4257c0a5699570
https://git.kernel.org/stable/c/941329ce14c5f481223a10d1d4c8b57ea7f3048a
https://git.kernel.org/stable/c/a1fb0c5b8a7c2753758aeced40971f99449dde0c
https://git.kernel.org/stable/c/bd43a7ec668be428265b3209eb43647aedcf720a
https://git.kernel.org/stable/c/eae099c764c7ebdb842eb1f638913e310bdd6513
https://git.kernel.org/stable/c/ebac8f6b1ef0e9278afe204b8692a7479988dace