https://seclists.org/oss-sec/2025/q4/334: Systemd vsock sshd
Affected Software
Frequently Asked Questions
What is the severity of vulnerability in OpenSSH openssh-server related to systemd vsock sshd?
The severity of the vulnerability in OpenSSH openssh-server related to systemd vsock sshd is currently assessed as moderate due to its potential to expose local socket interfaces.
How do I fix the vulnerability ID related to systemd vsock sshd?
To fix the vulnerability in OpenSSH openssh-server related to systemd vsock sshd, execute the commands 'systemctl mask --now sshd-unix-local.socket' and 'systemctl mask sshd-vsock.socket' to disable the affected sockets.
What impact does vulnerability ID related to systemd vsock sshd have on security?
The impact of the vulnerability in OpenSSH openssh-server related to systemd vsock sshd allows unauthorized access through unmasked sockets, potentially leading to local privilege escalation.
Is the vsock socket in OpenSSH openssh-server tested?
The vsock socket in OpenSSH openssh-server has not been tested thoroughly, as it is mentioned only in related documentation and sources.
Are there any workarounds for the vulnerability in OpenSSH openssh-server regarding systemd vsock sshd?
A workaround for the vulnerability in OpenSSH openssh-server regarding systemd vsock sshd is to mask the unix and vsock sockets to prevent unauthorized access.