<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 03:55:56 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-53118 — vsock: Fix sk_error_queue memory leak</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-53118</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;vsock: Fix sk_error_queue memory leak&lt;/p&gt;
&lt;p&gt;Kernel queues MSG_ZEROCOPY completion notifications on the error queue.
Where they remain, until explicitly recv()ed. To prevent memory leaks,
clean up the queue when the socket is destroyed.&lt;/p&gt;
&lt;p&gt;unreferenced object 0xffff8881028beb00 (size 224):
  comm &amp;#34;vsock_test&amp;#34;, pid 1218, jiffies 4294694897
  hex dump (first 32 bytes):
    90 b0 21 17 81 88 ff ff 90 b0 21 17 81 88 ff ff  ..!.......!.....
    00 00 00 00 00 00 00 00 00 b0 21 17 81 88 ff ff  ..........!.....
  backtrace (crc 6c7031ca):
    [&amp;lt;ffffffff81418ef7&amp;gt;] kmem_cache_alloc_node_noprof+0x2f7/0x370
    [&amp;lt;ffffffff81d35882&amp;gt;] __alloc_skb+0x132/0x180
    [&amp;lt;ffffffff81d2d32b&amp;gt;] sock_omalloc+0x4b/0x80
    [&amp;lt;ffffffff81d3a8ae&amp;gt;] msg_zerocopy_realloc+0x9e/0x240
    [&amp;lt;ffffffff81fe5cb2&amp;gt;] virtio_transport_send_pkt_info+0x412/0x4c0
    [&amp;lt;ffffffff81fe6183&amp;gt;] virtio_transport_stream_enqueue+0x43/0x50
    [&amp;lt;ffffffff81fe0813&amp;gt;] vsock_connectible_sendmsg+0x373/0x450
    [&amp;lt;ffffffff81d233d5&amp;gt;] ____sys_sendmsg+0x365/0x3a0
    [&amp;lt;ffffffff81d246f4&amp;gt;] ___sys_sendmsg+0x84/0xd0
    [&amp;lt;ffffffff81d26f47&amp;gt;] __sys_sendmsg+0x47/0x80
    [&amp;lt;ffffffff820d3df3&amp;gt;] do_syscall_64+0x93/0x180
    [&amp;lt;ffffffff8220012b&amp;gt;] entry_SYSCALL_64_after_hwframe+0x76/0x7e&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;vsock: Fix sk_error_queue memory leak&lt;/p&gt;
&lt;p&gt;Kernel queues MSG_ZEROCOPY completion notifications on the error queue.
Where they remain, until explicitly recv()ed. To prevent memory leaks,
clean up the queue when the socket is destroyed.&lt;/p&gt;
&lt;p&gt;unreferenced object 0xffff8881028beb00 (size 224):
  comm &amp;#34;vsock_test&amp;#34;, pid 1218, jiffies 4294694897
  hex dump (first 32 bytes):
    90 b0 21 17 81 88 ff ff 90 b0 21 17 81 88 ff ff  ..!.......!.....
    00 00 00 00 00 00 00 00 00 b0 21 17 81 88 ff ff  ..........!.....
  backtrace (crc 6c7031ca):
    [&amp;lt;ffffffff81418ef7&amp;gt;] kmem_cache_alloc_node_noprof+0x2f7/0x370
    [&amp;lt;ffffffff81d35882&amp;gt;] __alloc_skb+0x132/0x180
    [&amp;lt;ffffffff81d2d32b&amp;gt;] sock_omalloc+0x4b/0x80
    [&amp;lt;ffffffff81d3a8ae&amp;gt;] msg_zerocopy_realloc+0x9e/0x240
    [&amp;lt;ffffffff81fe5cb2&amp;gt;] virtio_transport_send_pkt_info+0x412/0x4c0
    [&amp;lt;ffffffff81fe6183&amp;gt;] virtio_transport_stream_enqueue+0x43/0x50
    [&amp;lt;ffffffff81fe0813&amp;gt;] vsock_connectible_sendmsg+0x373/0x450
    [&amp;lt;ffffffff81d233d5&amp;gt;] ____sys_sendmsg+0x365/0x3a0
    [&amp;lt;ffffffff81d246f4&amp;gt;] ___sys_sendmsg+0x84/0xd0
    [&amp;lt;ffffffff81d26f47&amp;gt;] __sys_sendmsg+0x47/0x80
    [&amp;lt;ffffffff820d3df3&amp;gt;] do_syscall_64+0x93/0x180
    [&amp;lt;ffffffff8220012b&amp;gt;] entry_SYSCALL_64_after_hwframe+0x76/0x7e&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-53118</guid>
    </item>
  </channel>
</rss>
