CVE-2024-53119

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the virtio/vsock component. The issue occurs when the final stages of socket destruction are delayed, allowing virtio transport recv listen() to be called after the accept queue has been flushed but before the SOCK DONE flag is set. As a result, sockets enqueued after the flush remain unremoved, leading to a memory leak. The issue is resolved by introducing a sk shutdown check to disallow vsock enqueue accept() during socket destruction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.