https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:44:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74614 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vsock/virtio: read virtqueues under worker locks</p> <p>Commit bd50c5dc182b (&#34;vsock/virtio: add support for device suspend/resume&#34;) made the *_run flags transition from false to true when restore installs replacement virtqueues. The RX, TX and event workers read their virtqueue before locking and checking the corresponding flag, so a worker delayed across freeze and restore can observe the replacement queue&#39;s running state while retaining a pointer to the deleted queue.</p> <p>Read each virtqueue under its mutex after checking the run flag, keeping the pointer and state in the same queue generation.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vsock/virtio: read virtqueues under worker locks</p> <p>Commit bd50c5dc182b (&#34;vsock/virtio: add support for device suspend/resume&#34;) made the *_run flags transition from false to true when restore installs replacement virtqueues. The RX, TX and event workers read their virtqueue before locking and checking the corresponding flag, so a worker delayed across freeze and restore can observe the replacement queue&#39;s running state while retaining a pointer to the deleted queue.</p> <p>Read each virtqueue under its mutex after checking the run flag, keeping the pointer and state in the same queue generation.</p> https://vulnerability.circl.lu/vuln/cve-2026-74614