CVE-2024-43873
- Source
- https://cve.org/CVERecord?id=CVE-2024-43873
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43873.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-43873
- Downstream
- Related
- Published
- 2024-08-21T00:06:25Z
- Modified
- 2026-08-12T03:51:28Z
- Summary
- vhost/vsock: always initialize seqpacket_allow
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
vhost/vsock: always initialize seqpacket_allow
There are two issues around seqpacket_allow:
- seqpacket_allow is not initialized when socket is created. Thus if features are never set, it will be read uninitialized.
- if VIRTIO_VSOCK_F_SEQPACKET is set and then cleared, then seqpacket_allow will not be cleared appropriately (existing apps I know about don't usually do this but it's legal and there's no way to be sure no one relies on this).
To fix: - initialize seqpacket_allow after allocation - set it unconditionally in set_features
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43873.json" }- References
-
- https://git.kernel.org/stable/c/1e1fdcbdde3b7663e5d8faeb2245b9b151417d22
- https://git.kernel.org/stable/c/3062cb100787a9ddf45de30004b962035cd497fb
- https://git.kernel.org/stable/c/30bd4593669443ac58515e23557dc8cef70d8582
- https://git.kernel.org/stable/c/ea558f10fb05a6503c6e655a1b7d81fdf8e5924c
- https://git.kernel.org/stable/c/eab96e8716cbfc2834b54f71cc9501ad4eec963b
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43873.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-43873
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedced7b713711fdd8f99d8d04dc53451441d194c60Fixedea558f10fb05a6503c6e655a1b7d81fdf8e5924cFixed3062cb100787a9ddf45de30004b962035cd497fbFixed30bd4593669443ac58515e23557dc8cef70d8582Fixedeab96e8716cbfc2834b54f71cc9501ad4eec963bFixed1e1fdcbdde3b7663e5d8faeb2245b9b151417d22