CVE-2024-44996: vsock: fix recursive ->recvmsg calls
In the Linux kernel, the following vulnerability has been resolved:
vsock: fix recursive ->recvmsg calls
After a vsock socket has been added to a BPF sockmap, its prot->recvmsg has been replaced with vsockbpfrecvmsg(). Thus the following recursiion could happen:
vsockbpfrecvmsg() -> vsockrecvmsg() -> vsockconnectiblerecvmsg() -> prot->recvmsg() -> vsockbpfrecvmsg() again
We need to fix it by calling the original ->recvmsg() without any BPF sockmap logic in vsockrecvmsg().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44996?
CVE-2024-44996 has been classified with a medium severity due to the potential for recursive calls in the vsock implementation.
How do I fix CVE-2024-44996?
To fix CVE-2024-44996, you should upgrade the Linux kernel to a version that includes the patch for this vulnerability.
Which Linux kernel versions are affected by CVE-2024-44996?
CVE-2024-44996 affects Linux kernel versions from 6.4 to 6.6.48, and specific release candidates of 6.11.
What kind of systems are vulnerable to CVE-2024-44996?
Systems running vulnerable versions of the Linux kernel that utilize vsock sockets and BPF sockmaps are susceptible to CVE-2024-44996.
Is CVE-2024-44996 a remote exploit risk?
CVE-2024-44996 presents a risk of remote exploitation due to the nature of vsock sockets being used in network communications.