CVE-2024-44996

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a recursive call in the vsock bpf recvmsg() function after a vsock socket has been added to a BPF sockmap. The prot->recvmsg has been replaced with vsock bpf recvmsg(), leading to a potential recursion. To fix this, the original ->recvmsg() should be called without any BPF sockmap logic in vsock recvmsg(). The recursion could happen as follows: vsock bpf recvmsg() -> vsock recvmsg() -> vsock connectible recvmsg() -> prot->recvmsg() -> vsock bpf recvmsg() again.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.