CVE-2024-53103

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0

Description A vulnerability has been resolved in the Linux kernel related to the hv sock module. The issue arises when the vsk->trans variable is not initialized to NULL upon the release of hvs, potentially leading to a dangling pointer. This problem is addressed by ensuring vsk->trans is initialized to NULL.

Recommendations For Linux kernel versions prior to 6.12.0, upgrade to version 6.12.0 or later to resolve the issue. As a temporary workaround, consider initializing vsk->trans to NULL manually until a patch is applied. Restrict access to the hv sock module to minimize the risk of exploitation. Avoid using the vsk->trans variable in sensitive operations until the issue is resolved.