Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
vsock/virtio: discard packets if the transport changes
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux kernel 代码问题漏洞
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在代码问题漏洞，该漏洞源于vsock协议在套接字被重新分配或未分配到传输层时，未正确丢弃接收到的包，可能导致访问未初始化或已释放的vsk->transport，引发空指针引用。
CVSS Information
N/A
Vulnerability Type
N/A